{"report_id":"77be81a8-c478-4605-b355-fdcf90d322c1","version":0,"status":"done","tags":[],"date":"2026-10-17T07:03:17Z","url":{"schema":"http","addr":"weumax.com/","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"weumax.com/auth/second","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"title":"Weumax: Create an Account","dom":{"size":17753,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13148)","md5":"d065c6ba6b1fca37bb9a98b1392116a0","sha1":"7f1eb5c9b1e1b0fd83828f589b6bd62f54a3f429","sha256":"f139858b7485f3d051534d0e85e9ecc13d381d0ffd84a10c02a5ddce7b512e90","sha512":"05f2f72cf008eb8e90ab0ea1acd97c4afb3ae1a3dddc0c2e0a6e6bc435fc752055a0a9df5e1f5d7a3f034423f2c3b8f15f454f88b48bafb3c7cbbb1c180e7039","ssdeep":"384:TcTn9wnBhpqBRdKhj0Shj0ezVxj0SNXSjRS8J7shcP52k2121Tt:in9ZRohj0yj0eHj0StSjbJ7sWUVg1Tt","tlshash":"c28208783113832fa23756e5b6a1eb2c618ae30bd917cc0cb3dc51e91fc9dd89c52699","dom_hash":"domhash73e7bb11e8381429f9cd1820eca0e7f7","first_seen":"2026-10-17T06:48:21.820772Z","last_seen":"2026-10-17T07:03:36.872071Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"weumax.com/","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-21T07:03:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"weumax.com","ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-14","domain_rank":0,"first_seen":"2026-07-10T10:59:57.034701Z","last_seen":"2026-10-17T06:48:16.375412Z","alert_count":29,"request_count":29,"received_data":1692294,"sent_data":16370,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"weumax.com/op1.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-10-17T07:03:36.941547Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/main-D-K2gyrN.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a1421b814552cf9c740c939097f203","sha1":"71e86c5d9901c561feac6140e7bd3bddd389b472","sha256":"4e8f0cbe3d42b8db2ee4a38f143a01496f5bab658621dfb0e58ab44a8f6b9255","sha512":"ba07a111a7bc24aa82f19f8a00a7f11112967e14310ac77c5027a31e5e4c05b5ad599e0c675dbb9f3c653fb9d71625d78e0597d73d501af1a110589c8dd12cd9","ssdeep":"12288:tAZX273I97+o91twkct69VKeOuuhZPB04XwJ3VQ7TCd6p3Pe6Z7mNpU7NCKo9VRi:WX2DG7h1tJct69VKeOuuhZPB04AJ3VQV","tlshash":"eef44ae87196b13647e306f5507f0106b2381961740d8890f26dedef3bb544aa2bbfad","size":752093,"data":"","first_seen":"2026-10-15T14:56:49.420694Z","last_seen":"2026-10-17T07:03:36.944903Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/en-BnldJ70A.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e7e54d64677a27ad0fe71e0fe2307217","sha1":"1ebe5bd5d9930cc44129e9210a43c4f03c261714","sha256":"4920557f80d31b6b8c0cef23e40a8542a3775adf0393b6f4d213f7326ab59295","sha512":"53d07274c5c8d9d216394526000bfe55e6b5f4f6ffdb73852077b57a1ba2865e05f31c79ce56cd823432e450a199ad3ef27a6a7ff7ec1e4c491d403ffe49161d","ssdeep":"1536:kCIrfRXrhJmaRalUjb+5FvhzSoiAbAvnPdXMT:qfRXFhalUjbmFvhSoic0tMT","tlshash":"d5331b0fcb0515a409d333513dca1b69bbfc014692e2c4695dde812d23f6d6ae63bbe8","size":50281,"data":"","first_seen":"2026-10-15T14:56:49.361207Z","last_seen":"2026-10-17T07:03:36.925975Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/route-joPllfQ_.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86232d20a47ab77b5790a37aa6739932","sha1":"d447731add3cef68c9687350963dd15f0964804a","sha256":"0d8984d956f8fa40c5659c09e197cae6a4524dae2f9aba1be2466700062191a1","sha512":"7c70122fde2a953724ea5a9608e6f7402d24438a94d49cc7aaa7c5fcf914a7785dc1cd4243b63e3f50d5787402ff5bbbf6133a8a9e02e5bb5c01d46e7be3a42c","ssdeep":"384:gWnlMNVS2QLUmOw27GLPIRBlvLIaY5wKD6N6SlnpUxqUxboPhmhh:gglMNY2QyjBlvLIyKD6BhSqUxboPhmhh","tlshash":"f382f9e07291f2325f9204a2d839c164f0352d14301bd85cf1a96cab7967d8e7a77bfa","size":18345,"data":"","first_seen":"2026-10-15T14:56:49.406881Z","last_seen":"2026-10-17T07:03:36.939254Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/index-N2F1f-jA.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1bd8e8c7696bebde27707cf4837837e","sha1":"0693b5f85175abd8b91de4dcaaa563a06d17eef1","sha256":"3c8fe1fc5ed2850b3e95be409356737584a49ff215226890f2d34425feea56b4","sha512":"1dd1febbb14882aa5d60759ba1af38971834fd2d6d7e24cd4151eeefb46434d76c6ca28155b62edf3f90560278ac54d9d40421fe315a2ea026d46a999e6f043f","ssdeep":"","tlshash":"5331a686306571a5e34f18d6047ae504963a742d300f0ae42062dd5974b47ae67fbfbb","size":1826,"data":"","first_seen":"2026-10-15T14:56:49.414217Z","last_seen":"2026-10-17T07:03:36.940293Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/data-BF_1uSZo.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e739317f6937caae6e073257d1e43189","sha1":"87114b729b6279e93f252364ff7e58c748b5855b","sha256":"37aba2357587a24b24b4eff3d096de00647b292c7c3729dc3f2341f0cf732fe7","sha512":"fe41e9dbc38b8b992f36ea5af2eeac10f3d2888b9e85006fe1d8c4769a6fdc00584d0e34f64b926bfbe34c3ef110eb1bcfe94807b4e62d5cf95ffc943a12d680","ssdeep":"","tlshash":"06112301ccb224bce67245b410af0e3021cd5de9368d8440f1699ed977505a291d9f9d","size":919,"data":"","first_seen":"2026-10-15T14:56:49.38724Z","last_seen":"2026-10-17T07:03:36.88881Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/betsSectionSkeleton-TVcugmtd.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2abcc5b59515dc5c708239600aaaf4a7","sha1":"17fe3280a5775f916d5d2cf5114fb7d8ad55db2a","sha256":"1d3a6ac4fe4024123bfb2d63188631f64547eace1b98127942d8dcfb33141cbe","sha512":"74949c4ce666fd05a13265843f0d190a9a52b7ea8180fc39b26a99954ed3e841d17e44834203e793509ce3a9ccb45b6393245edb2e6599197f48791eb0fe05d4","ssdeep":"768:ezs3jbiWKEsMdRz/3x10q8FVccFDS1sn+tj2oaEzhvxi3XNTpmJLCqkglxCm4cSa:x3jbjKwBB23lnf8xadGHd","tlshash":"da13dab2a25873bcb98247740623a013a37e257f30cf51e4cb2d4964b98644de6779ef","size":45491,"data":"","first_seen":"2026-10-15T14:56:49.371192Z","last_seen":"2026-10-17T07:03:36.945622Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/second-BUiExJtl.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1867a1890fca50cc0333e2dd3070147","sha1":"5a3d0bf6571dfd2bf78a2b69d74ac268b10a583b","sha256":"cfde546c24f8add47d5d4337848443fc8b9b3b36dd39c47bab8dd80b05588294","sha512":"1013655fa4db8c7ff1761bebbe9b512eb26d15d8d697df60161511826ab1a52908f32734a71048cfa61e28db551a2e94643bbc8540a07134a0de2a84af0c3199","ssdeep":"384:+8X+Aj0IXfoZjehqXevOe+TEmsmeaR1PZWOw6Ny2D8caCODIdSh0Pjq2D0BcFxjI:+8OAj0IXfoZjeWwONTEmXeGPQOw6fD8N","tlshash":"a2a28670a15072bde86334b5ac7dd65830099e44c62b4f9cf1a83c276eb549a7e83bc7","size":22122,"data":"","first_seen":"2026-10-15T14:56:49.422191Z","last_seen":"2026-10-17T07:03:36.897325Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/fpix.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43985de08c88d52fc0481e8022cbf130","sha1":"a6482492a7bc43ca9280e4fd032b17867333d17a","sha256":"b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c","sha512":"d268bcfb6c6780a3cc9d035cb1bfa41ea6724ad74ffe7be67929645dcf4aa962c95dd9a42c6aa602c913d795a254a345b7e07bdbca2b7e148b8dd287e4768d81","ssdeep":"","tlshash":"70f09e191c46b0bd16ed607aa33bbd192217274474d1c4235acc81286ee0d255fb5ecd","size":481,"data":"","first_seen":"2026-01-31T21:08:57.336506Z","last_seen":"2026-10-17T07:03:36.893396Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/index-CpjJew9_.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"429dc629a1ac2de9d84bb06b6833dbe3","sha1":"32918729079b9d7fb76390c2cbc735bbbe43f442","sha256":"6af1342c86f43c0878d57fa015a148d2c639ee35b4b6ca064539d8935643e942","sha512":"fcfb6cad3ce4561f6927dd471a42aca731cf3bed4c9992d3fbd7d54b970bd382d491e2fc615894b377054ceecc5fc65686e0cc442adab44584aebcdc83acdf8e","ssdeep":"384:yAHdv76O+Ty3hkV8ATWZvbd/bIjtsfI00GIU06cn2kU/miSXysPaoLDeyx9bb0mB:5cop/Tb7cn2H/7SZyo7pN0wdP","tlshash":"2b82641ed354a3bcee8687b0832264b1755e159f20f6d3789294856073d30ecd6be8ee","size":19252,"data":"","first_seen":"2026-10-15T14:56:49.359827Z","last_seen":"2026-10-17T07:03:36.933846Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/emptyState-CO3IpeH9.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"442ded62ebe01fe6dfaa21621273344b","sha1":"63c0f90b1fb45162f86ec8d32941c9379cf5691a","sha256":"50dc45a9f15e7c050177ecc3dfde20f66df54a5aabe12a79aad2cf61687b4e88","sha512":"9e055643cb8971e9050bb32d808b6ba229dd7ecb007e75e0592155f1145b0dee75309a26629a8ff6baa4aeee1c367e21826e91e9bd514086c535c65a386d4155","ssdeep":"384:xCNbOr9ulxmY9E8IU4KErR3IWdv+PqHHfkbhEnZVXO4XFO+yX+H4:xCMr8lxtEy4KExd9HHfOhEnZNdO+RY","tlshash":"c68219d572117214abea4187a0be0604b1385a15a80f8c6cf1f9099fbe559c87bfff74","size":17660,"data":"","first_seen":"2026-10-15T14:56:49.364986Z","last_seen":"2026-10-17T07:03:36.931917Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"weumax.com/flags/US.webp","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.469Z","timestamp":1792219934469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"6c0-HNyZyZ9nlimVryL8nIEflLctU6w\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:12 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 990\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OMzfJGILnv1JeI4U9VCzcPtD2qd3S6URp%2BYZu2M9x9WbKKJbH6mH5jTb9LtOLbOO4eC8pWHlqRrHhVjPD%2F%2F91pg25A9WiXqb86FMjM3BvysCvfWHbm%2Fcc5jYi2u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611e7f875685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":2627,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-10-17T07:03:36.884781Z","times_seen":148,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T06:52:12.366Z","timestamp":1792219932366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIYwmsPGGv4XmgytPy6ORBNhfAZlsTBZStA%2BTprbYt1aqYx9upAR9aDgP%2F4PRg8efcYIe5YA1%2FXf78i3EpkrSVe8hS2tmfSHaREkH5YgWOD5QyWKDwEEJFSOnBTF\"}]}\r\npriority: u=0,i\r\ncache-control: private, no-store\r\nlocation: /auth\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd6111fd6d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":85,"connect":27,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/auth/second","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T06:52:12.787Z","timestamp":1792219932787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /auth/second HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1XSaeexE%2BFuBzcMMyRgpGDkzBf3rvac6kFEMjLH0wrdvviPySJKvhiT3Nq1BiHj%2FpfjQ14mndxHSZ9oVeNcP3I%2F0Pedtqp0wjG4Ln2qu2dMdvsV3u8WXKOtKc6K\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a4bd6113edc45685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8472,"size_decoded":4176,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2680)","md5":"c91b1f55eb6e2d0f62777c0962e2c79b","sha1":"f62f3df7ef5b540a08968c09341ce0513a261950","sha256":"1e47a72f4661edbb252a65a6155f461ef1888a757ee3097436e137c366d8aec5","sha512":"ad99888bb44bb1ddabca7c85e148ae292d13e415169f71195e750decb9506c207fb4e5b0fa54537795ccdd6fcc93a4c4771a44b35ef08862d5ccb8aa8475f824","ssdeep":"192:/ACT1W0uDmJs897Yuz4n4AscI6Pj8VCh9vaL4vudL5kl:ZcTn4AsWr904AL6l","tlshash":"5b0218b25453c1156136f6d9fba9660402e4a14bc405c83c72cea2aecfc8ecb599ee75","first_seen":"2026-10-17T07:03:36.887155Z","last_seen":"2026-10-17T07:03:36.887155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/data-BF_1uSZo.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.337Z","timestamp":1792219933337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/data-BF_1uSZo.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WK5g5vO%2FU30wQpS6BaZC3d8aBkYlK3mIG0zXKWAQP3oQyRxLXTsDOhu2NSA1MM98n2j78Vjru4Y8%2Fbt%2FRb%2BR5jUmUW%2B3ZXF5foQ3S8QXeEQyk6MV3We2w71l7SCd\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"397-hxFLcptieek/JSNk/35Yx0i1hVs\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:07 GMT\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 340782\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61175e715685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919,"size_decoded":1445,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (881)","md5":"e739317f6937caae6e073257d1e43189","sha1":"87114b729b6279e93f252364ff7e58c748b5855b","sha256":"37aba2357587a24b24b4eff3d096de00647b292c7c3729dc3f2341f0cf732fe7","sha512":"fe41e9dbc38b8b992f36ea5af2eeac10f3d2888b9e85006fe1d8c4769a6fdc00584d0e34f64b926bfbe34c3ef110eb1bcfe94807b4e62d5cf95ffc943a12d680","ssdeep":"","tlshash":"06112301ccb224bce67245b410af0e3021cd5de9368d8440f1699ed977505a291d9f9d","first_seen":"2026-10-15T14:56:49.38724Z","last_seen":"2026-10-17T07:03:36.88881Z","times_seen":8,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/fonts/Inter/Inter-ExtraBold.woff2","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.541Z","timestamp":1792219933541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /fonts/Inter/Inter-ExtraBold.woff2 HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://weumax.com/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Wz6P5uJ7myh8Q%2FLutKP5vgmLYei1%2BLrMPV4ZKtSesgDRE0rPbcaPrddR9ISQJ8eRJ1SKl5FUOiqmzB34MmDBxKSV%2BRWvADFy2zDByJVwq1VltE%2B2mwFwERSku44\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b5e4-vBgkDpT/DuQeN6BAwPQO9EYUI4A\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 933\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4bd61189ea45685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46564,"size_decoded":47442,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46564, version 1.0","md5":"e0fcdc9608e1e7e3665003081e85d6de","sha1":"bc18240e94ff0ee41e37a040c0f40ef446142380","sha256":"d88c097ccc2ab790c8ee7cbdec23544920ea7ac4b085db891655e57c2fb61562","sha512":"73e2a3cfdc7185acc2e53f0b00a75deeccd7c29d4550b2f8d08a308527007b8fee884836d35ad34a3eb6a4bc4d14b1ec1c248e78d1332de619f9a63a9cb8406b","ssdeep":"768:CIpZRc0V4TPXxiKqNraAHkVUIWNcuHBMoLMC/JcFPdCyGipEQwcqcNK4xZib:tprePXxJW5NcuHBMYMCajCyGipEQdK4g","tlshash":"8823f292ba22e268406bdb391db92becf5d1447e13c630fbc230159b9d667c3d6c2251","first_seen":"2026-10-05T00:26:04.52171Z","last_seen":"2026-10-17T07:03:36.88956Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/landings/second/hero.avif","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.197Z","timestamp":1792219934197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /landings/second/hero.avif HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\netag: \"1f31d-lp+rNMxewLdTlzSKlvXaJhjTAjg\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:05 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 1021\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zNWMEgwtwgO4a9Qecr7aShCVdf1iGuOOdbUo8FYgYYc%2BG8ajFuBJ%2FMCc0YnSwFgZ%2Fg9cl8NpFfztVNiBo%2B%2F5LMRHoIPM3xn7cEPBN6PqIFknn2p%2BStySMIbxVr12\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611cbf425685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127773,"size_decoded":128681,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5833dede4aa769204a067b0f54bd20c5","sha1":"969fab34cc5ec0b75397348a96f5da2618d30238","sha256":"a348354e25d1e8b9a3e568ad607429030986fbe41c67477607aabdff43e29a5d","sha512":"74dca2e4c0d6f5bc385e6c56f0c4b962f74f9ead996f2bdfe9c10bf2d536dd74425278b4183cd89d5c3bfda18e8248bea0709fae346749df0d6ca861be4a63c3","ssdeep":"3072:cUfUcfjoiM0CeFd6oOcDssSGY7TH5SnXNRO+bYhN9xcRf:cHY5+SnXTOH/Pch","tlshash":"17c3121c812c4cdc361aa1efec955131311cd250c60acbaf9bc7b7ae799bd298498fd1","first_seen":"2026-09-27T08:31:09.234478Z","last_seen":"2026-10-17T07:03:36.892714Z","times_seen":30,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/fpix.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.347Z","timestamp":1792219933347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /fpix.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zG4LxySR9%2F6gsM%2BmYcXJK3VDQc6wdIDlGC%2BdG%2BoRjFtibTAxVx4zaob6DUP5LWnvV6InlgCVM04e6d0epc8ERff2RWEMtkhC%2FJcmQ%2B%2F3ghJiqq7ekMnXN%2BT3Ifz1\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Jul 2026 16:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"1e1-pkgkkqe8Q8qSgOT9AysXhnMz0Xo\"\r\nage: 2366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4bd61176e765685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":1069,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"43985de08c88d52fc0481e8022cbf130","sha1":"a6482492a7bc43ca9280e4fd032b17867333d17a","sha256":"b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c","sha512":"d268bcfb6c6780a3cc9d035cb1bfa41ea6724ad74ffe7be67929645dcf4aa962c95dd9a42c6aa602c913d795a254a345b7e07bdbca2b7e148b8dd287e4768d81","ssdeep":"","tlshash":"70f09e191c46b0bd16ed607aa33bbd192217274474d1c4235acc81286ee0d255fb5ecd","first_seen":"2026-01-31T21:08:57.336506Z","last_seen":"2026-10-17T07:03:36.893396Z","times_seen":127,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/api/rum","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.022Z","timestamp":1792219934022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"POST /api/rum HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://weumax.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"POST","post_data":{"size":67,"data":"{\"metric\":\"FCP\",\"value\":1244,\"id\":\"v5-1792219933673-5601291100057\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BS8XLUvwnNsXpk%2FG%2FHAM4NOKPuPTtbpn7CQhp6Ev8KyEJ%2FRhR8JunsrSmgXMnRKG9tQZ9B9EIaVgUe6S2SSuqydnzKHTVt%2F1nEnRKAvs85AHXOnRvBG8VGhB%2BafL\"}]}\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611baf1d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1348,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/api/f/fpix","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.026Z","timestamp":1792219934026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /api/f/fpix HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nsentry-trace: f5f9172d87c848a99393cb9500d6877b-b790a02b5ae60c4e-0\r\nbaggage: sentry-environment=production,sentry-release=18d4b51,sentry-public_key=e3092b65957eea25c8f7db5e687d10bc,sentry-trace_id=f5f9172d87c848a99393cb9500d6877b,sentry-transaction=%2Fauth%2F_landingLayout%2Fsecond,sentry-sampled=false,sentry-sample_rand=0.2782518176757358,sentry-sample_rate=0.01\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncySszK8MT5u6GLIt39kRdO9rKzHhKSCwAkLcbzPR8hrMqqf8A5Kl%2FSvXNPLP8AexYp7FSCZiIgogYXLApGbYlTgbE1sFY4sZrDmFAidoAusaMxAH%2Byg3zsL%2BKgN\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611baf1f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":814,"mime_type":"application/json","magic":"JSON text data","md5":"f3b003dc0013501f0575f9607c83769c","sha1":"967c27a14d63a0ed3815a00af30ea57777410dad","sha256":"f45b6c39dd4c66a87836d584b6fad8719033a74ad4500f3ec7954f91bd162f51","sha512":"258f118ae54671e553a5a5d1f5dac6e38fa816be1fbbe808e2f90d5ae411de01de8d689ffd03a3b25b910db2553f70881d65ebf4d49603b438ff7f986341f31c","ssdeep":"","tlshash":"ae6000300c3030330cc0f0c0cc0000c3c000003000c000000c003c000c300c0000c000","first_seen":"2026-04-17T17:16:03.621056Z","last_seen":"2026-10-17T07:03:36.894044Z","times_seen":26,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/apple-touch-icon.png","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.137Z","timestamp":1792219934137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\netag: \"158e-E2xpKcekYMhDj6KT9vepXXpIXO8\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:11 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 933\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvLsJ4xQus2OvHoIpgbYqgnVEyzjeBDZgjwuFh9saXH9e0plevA0YyuwraWFki%2Bduy4XwTGGNEV6Z%2FTYuCL2haqEY1HQCKCHRZf9LliX5TcJdsX5Hsv3Fvb%2Bcahf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611c5f315685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5518,"size_decoded":6418,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e412480e2b0a49f248aa87a6d248efc9","sha1":"136c6929c7a460c8438fa293f6f7a95d7a485cef","sha256":"16576dbbf6e56e33a6444cf780ac417641ef24f030e46d3fa2c15839ee331163","sha512":"aedd1821d9af2f2b1f079b212c437bd4a304ce731b0b01867d082190d86a8848ad905023cf73333a6d0ed4678b143b3f2f81191427f02459a27b632ef2759f76","ssdeep":"96:oIluHoXhT1GFWT6xh0Y8NCchKqV5mMPrUSk2xUpfAtjjKsRb9L34umvAfJy6peqi:uoGm6xqVjhoMPQt2xpPKC6Ide8/vo","tlshash":"94b16de1b933e5d88993cd3b838ae73c4e1fb23a174b30b99969555005315c49d7a3b4","first_seen":"2026-09-27T08:31:09.232244Z","last_seen":"2026-10-17T07:03:36.896696Z","times_seen":30,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/auth","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T06:52:12.670Z","timestamp":1792219932670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Yz147r%2Boqsmm9Qck2Er%2F%2BWZIdT4PvQ2tFfXv0Ex3d5%2FGTGud5F0U%2FH2OpObLWuErE1CyWURIsO%2Fhzk%2F6g70KRIIHoZKrJWLi3NqUvMSukqerDZKpTchXqBhC9Ca\"}]}\r\npriority: u=0,i\r\nlocation: /auth/second\r\nset-cookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; Max-Age=31536000; Path=/; SameSite=Lax\nlanding_choice=1; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61132d985685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; Max-Age=31536000; Path=/; SameSite=Lax"},{"name":"landing_choice","value":"1","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"landing_choice=1; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/second-BUiExJtl.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.325Z","timestamp":1792219933325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/second-BUiExJtl.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1a69-avz6Ybl5kg+XPT3GYLEGOpeaUns\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPRGQ5C1X0Yy45uMxgwWxZp2FkNsGRo8BJ0ePpcNl3y7xhGb%2B8eNcrAFj7u0drEN15P6Db5nhF3oHu3z%2BVAEjR3IF1lfByYip3El%2FaFOm3avKk4lX%2FjFDV8YHNCH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61174e6b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22122,"size_decoded":7583,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22086)","md5":"d1867a1890fca50cc0333e2dd3070147","sha1":"5a3d0bf6571dfd2bf78a2b69d74ac268b10a583b","sha256":"cfde546c24f8add47d5d4337848443fc8b9b3b36dd39c47bab8dd80b05588294","sha512":"1013655fa4db8c7ff1761bebbe9b512eb26d15d8d697df60161511826ab1a52908f32734a71048cfa61e28db551a2e94643bbc8540a07134a0de2a84af0c3199","ssdeep":"384:+8X+Aj0IXfoZjehqXevOe+TEmsmeaR1PZWOw6Ny2D8caCODIdSh0Pjq2D0BcFxjI:+8OAj0IXfoZjeWwONTEmXeGPQOw6fD8N","tlshash":"a2a28670a15072bde86334b5ac7dd65830099e44c62b4f9cf1a83c276eb549a7e83bc7","first_seen":"2026-10-15T14:56:49.422191Z","last_seen":"2026-10-17T07:03:36.897325Z","times_seen":8,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/styles-CUSEJlKH.css","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.339Z","timestamp":1792219933339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/styles-CUSEJlKH.css HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"8cf6-T9+Tm6qUxEGseHDmVuHInaKtMEo\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:42 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 921492\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwQdArpmR8bomHbI42YJV2fstWZ60DWFIvGp5txNnRiPg%2FnTZq5YS%2FY6wF38Wx3fmxt0%2FRFgUO99mtC43JnLzknJmZZk9TXMwmvCAy1b2ja1xMUH6iIVuy%2FNIDfq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61175e735685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384612,"size_decoded":36902,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"567eec84a23092bb7ffd493843682b90","sha1":"964b5feca732fe098ca26af1f13c3a8630b3f0e0","sha256":"1aa87143becffdcce87b653980bc0b80b7ab41ddd47fa0a90885f1f5cc4d631c","sha512":"7d005b2865722da953a23beabf5c616941d18856812fedc4eb915d54338d7b909cbd46d9aec245ed0b2026e074e4a619d96c42d200e9001259242db4c2bb2802","ssdeep":"6144:HcmDL+pazx68c/O3jchNU4hQlH6wDMgOKE0QCno1yKGI+MAxoK/KCYc97yReuYBo:BlK","tlshash":"3e84a490f119e0bb7d1bb4fda38cf89dd205f081de3a4ba9f951912123d3bf26962614","first_seen":"2026-10-06T02:08:22.87631Z","last_seen":"2026-10-17T07:03:36.916833Z","times_seen":24,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/en-BnldJ70A.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.013Z","timestamp":1792219934013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/en-BnldJ70A.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/assets/main-D-K2gyrN.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"3ba0-LETro9rYeboPd6JcCOKUAZ+SlTY\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 100861\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XFvsYb0KoVnCDi5Y7Z1ELmXNebNjhiUHyQY0dgGqaxRRRVml0sr%2FgxI9Sbugz8qNgVZT1A4d7j4DInKTk9ZC1W%2FbCkfXmnxmLczRXSPzf01wf%2FzpyCTfMhb5P43\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611b9f1c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50283,"size_decoded":16085,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12681)","md5":"e7e54d64677a27ad0fe71e0fe2307217","sha1":"1ebe5bd5d9930cc44129e9210a43c4f03c261714","sha256":"4920557f80d31b6b8c0cef23e40a8542a3775adf0393b6f4d213f7326ab59295","sha512":"53d07274c5c8d9d216394526000bfe55e6b5f4f6ffdb73852077b57a1ba2865e05f31c79ce56cd823432e450a199ad3ef27a6a7ff7ec1e4c491d403ffe49161d","ssdeep":"1536:kCIrfRXrhJmaRalUjb+5FvhzSoiAbAvnPdXMT:qfRXFhalUjbmFvhSoic0tMT","tlshash":"d5331b0fcb0515a409d333513dca1b69bbfc014692e2c4695dde812d23f6d6ae63bbe8","first_seen":"2026-10-15T14:56:49.361207Z","last_seen":"2026-10-17T07:03:36.925975Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/api/rum","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.094Z","timestamp":1792219934094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"POST /api/rum HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://weumax.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"POST","post_data":{"size":67,"data":"{\"metric\":\"TTFB\",\"value\":638,\"id\":\"v5-1792219933673-3666549450142\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cq8FKaofa3g5bw26kQTKc4xwE8g5h9fbQXZuow%2B7sKTerFhwgdNG2GbmZfxgRmz588qvKcLVUgmHbse3%2BjsahbavdOgWFRQYCsin9K4k%2FG8z7tDN2mTiq2kYoET8\"}]}\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611c1f295685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1342,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/fonts/Inter/Inter-SemiBold.woff2","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.406Z","timestamp":1792219934406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /fonts/Inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://weumax.com/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pocQfOegAp9TE0Vp5YQG73Fu0vje5MU%2FEcKdaZI0lUb2lUTJ0oA2ueZMuG0psaZgOjFtQoQp3iVbIICQF1EWVdVJRRAHkd4PQsf%2F28eLpwJDPbp4qiUfo%2FDDYYMs\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b508-+tc9Gwp9v2AT/9RUAlxm4PY6Yi4\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 933\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4bd611e0f705685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46344,"size_decoded":47220,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46344, version 1.0","md5":"1d0c3d4298ec4f8eff3f6bd9d141e230","sha1":"fad73d1b0a7dbf6013ffd454025c66e0f63a622e","sha256":"e59f2e8cb477a2f9dec360aecfbc08e6936f85eb7671e412cee8b26f06e44fb8","sha512":"7bc7d19b4e29802bc37b8c92c1c495abbdbb1f1952e807e735d50603497c10e080dc1464845391d496bc6903032d302a23217d93318cb1d146a988b587edb302","ssdeep":"768:v5pFaPuKskUL+GlFJEjT9pBW6xUkrbDBJq+1+GV616cI/entCFwr0EIO6YXYEV:v5DsIn9lFujBpB3SkrJJ41se0Ejom","tlshash":"4d23021d24aec9044636272cefd34d9f9ea7c21611ee5a3ab4c4222c79e581df425c7a","first_seen":"2026-10-05T00:26:03.800619Z","last_seen":"2026-10-17T07:03:36.927735Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/emptyState-CO3IpeH9.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.318Z","timestamp":1792219933318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/emptyState-CO3IpeH9.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"181d-/Qp2S3Ib1BxBgQireAam+REPgbc\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Z164NRhFvF0O88uG4n7L3ZijFfwXFVWZbzQM7106syqJI040X23u42FhnQbcpaCOoXww9gRjuqXmliIUSeAj6ehhtUcbi8EGfcLkKiw2hO0waKnocdDpXRO5r2v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61173e685685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6173\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17660,"size_decoded":6987,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10441)","md5":"442ded62ebe01fe6dfaa21621273344b","sha1":"63c0f90b1fb45162f86ec8d32941c9379cf5691a","sha256":"50dc45a9f15e7c050177ecc3dfde20f66df54a5aabe12a79aad2cf61687b4e88","sha512":"9e055643cb8971e9050bb32d808b6ba229dd7ecb007e75e0592155f1145b0dee75309a26629a8ff6baa4aeee1c367e21826e91e9bd514086c535c65a386d4155","ssdeep":"384:xCNbOr9ulxmY9E8IU4KErR3IWdv+PqHHfkbhEnZVXO4XFO+yX+H4:xCMr8lxtEy4KExd9HHfOhEnZNdO+RY","tlshash":"c68219d572117214abea4187a0be0604b1385a15a80f8c6cf1f9099fbe559c87bfff74","first_seen":"2026-10-15T14:56:49.364986Z","last_seen":"2026-10-17T07:03:36.931917Z","times_seen":8,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/index-CpjJew9_.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.335Z","timestamp":1792219933335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/index-CpjJew9_.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"17f8-V76N31RhaSzKsgEnYMAZ9dVHiXE\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibfi8LFxiVAXILYTZ2IGwAYTfSF6KWc%2Bks4YyxIACkjM73qEDvC9qSDqsVHRluTuaPNwAnMCGzulQOmVAtkDnoXNZAOEzu7VCWhhbSYF3xiXn%2BKKSCdVeCrVZAPS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61175e705685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19252,"size_decoded":6954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19251)","md5":"429dc629a1ac2de9d84bb06b6833dbe3","sha1":"32918729079b9d7fb76390c2cbc735bbbe43f442","sha256":"6af1342c86f43c0878d57fa015a148d2c639ee35b4b6ca064539d8935643e942","sha512":"fcfb6cad3ce4561f6927dd471a42aca731cf3bed4c9992d3fbd7d54b970bd382d491e2fc615894b377054ceecc5fc65686e0cc442adab44584aebcdc83acdf8e","ssdeep":"384:yAHdv76O+Ty3hkV8ATWZvbd/bIjtsfI00GIU06cn2kU/miSXysPaoLDeyx9bb0mB:5cop/Tb7cn2H/7SZyo7pN0wdP","tlshash":"2b82641ed354a3bcee8687b0832264b1755e159f20f6d3789294856073d30ecd6be8ee","first_seen":"2026-10-15T14:56:49.359827Z","last_seen":"2026-10-17T07:03:36.933846Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/fonts/Inter/Inter-Medium.woff2","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.409Z","timestamp":1792219934409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /fonts/Inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://weumax.com/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJ4%2BiMN69Z0T53Cjmiuw9NpVJA6pCsPmUtW84K5D3XGFDFgmMNqvGS8XvWxn5eztjoa7KehiiZ%2Fj3lgDUkRR6PnNqJ75aRr5qrcQmAWeowwP8MaG9UoXQ1LCh1Bk\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b43c-32iwUiYmZJOjosXJ3ce7OQ+oXo8\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 933\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4bd611e0f715685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46140,"size_decoded":47014,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46140, version 1.0","md5":"9b221a9a56703f15dfc37c59bc64144e","sha1":"df68b05226266493a3a2c5c9ddc7bb390fa85e8f","sha256":"76bc13bfdb34d0cc66055091629e8e4c0fbb8a180a5eb23e81f355233d17b229","sha512":"78c173076fe123b4aa587b854c9ef773870e6a9af3370c4d23abe77b5e3a1182e04c9211ff3bea8e15ef5d67a8a8848adb606d0faddd64069d1a844dd4f7c632","ssdeep":"768:jPYQnk2U1gXt1qUah1pKx6hrVhpKyrHB3yQqZu1+x+xTCZSzn7PzCLjq:PnkZCXsh1IWhpKKHpqMdCZWDGnq","tlshash":"5623f1cbc134e6948a3370330ca73e1cb56673e365d25e4ecf19e00950519aae699ecd","first_seen":"2026-10-05T00:25:58.941641Z","last_seen":"2026-10-17T07:03:36.93637Z","times_seen":26,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/landings/second/play.avif","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.460Z","timestamp":1792219934460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /landings/second/play.avif HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"1cbb-zDoSYcPuXINQFf+/rs3r3tRbSbc\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:14 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 1021\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXrQ4BL0Ngu6iKeHKuSlIxe%2Bm%2FCgwueM0Xwo0rQ0Si6UkRf2qUXkSZRHBKPPwfVehnucoUSQqmnAxlNO286AbWiD1RluMHXR6fLQD%2FYhNxy1Md5Jst%2F1Ao24TwP5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611e5f865685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7355,"size_decoded":8256,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3a28ab9c1cf794e145490811cee0511d","sha1":"cc3a1261c3ee5c835015ffbfaecdebded45b49b7","sha256":"9cf1c1ee3a1fba3e7b0a7e0ba45952bafa889665fbabc29fc69ee692959b3a53","sha512":"b1cce3cedfb0689e5003142bf5c85499f0983704c4f85618e7c9f301c0795a04b8a6c79537987b098ea640c57487a07a379b715c9b28f176a6b2467bbab73deb","ssdeep":"96:rGPa9bct0fWW9NldbKU2ibw6heDPolFYjA6tBoYp0EGOcvVPNflGIywVn2IzOkCy:rGSCAdbGIeklujltPcvVlflGbwV2IJ","tlshash":"1fe1b09c36506fd0de192dbb3aa065314542c29b5ba2714e574ff66bf4d87a09e120c2","first_seen":"2026-09-27T08:31:09.211154Z","last_seen":"2026-10-17T07:03:36.937624Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/route-joPllfQ_.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.305Z","timestamp":1792219933305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/route-joPllfQ_.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"186e-6m9UOUM816yQkQ4uKT7tIQS4www\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3Pf%2BYvvcFoPOJPlrTxrpLoTqyvr4tGCRPeGppe%2BqwuoMlO%2BFOJEullkBZPyzyt2V38vnDdvXaQr9zmfc15Lfrgrq9rXuVPajgo%2FGfvpRydUOqYHaWslA79ROpqy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61172e655685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6254\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18345,"size_decoded":7076,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18344)","md5":"86232d20a47ab77b5790a37aa6739932","sha1":"d447731add3cef68c9687350963dd15f0964804a","sha256":"0d8984d956f8fa40c5659c09e197cae6a4524dae2f9aba1be2466700062191a1","sha512":"7c70122fde2a953724ea5a9608e6f7402d24438a94d49cc7aaa7c5fcf914a7785dc1cd4243b63e3f50d5787402ff5bbbf6133a8a9e02e5bb5c01d46e7be3a42c","ssdeep":"384:gWnlMNVS2QLUmOw27GLPIRBlvLIaY5wKD6N6SlnpUxqUxboPhmhh:gglMNY2QyjBlvLIyKD6BhSqUxboPhmhh","tlshash":"f382f9e07291f2325f9204a2d839c164f0352d14301bd85cf1a96cab7967d8e7a77bfa","first_seen":"2026-10-15T14:56:49.406881Z","last_seen":"2026-10-17T07:03:36.939254Z","times_seen":8,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/index-N2F1f-jA.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.323Z","timestamp":1792219933323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/index-N2F1f-jA.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"327-QrfKzh7M4Wc8HtXRKrY+9z0ncsU\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyFKNDKwWMdrRmw4TaRwRusvlToroKV34XxycEflCcfhZ2y0zlyOREF0HMI1dhl5CllvXDR%2FkUM3KssREbKPFAgl7k1MAriDVlEVt71eg9yaFP4H7y%2BLZBJgIJQV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61174e695685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":1623,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"e1bd8e8c7696bebde27707cf4837837e","sha1":"0693b5f85175abd8b91de4dcaaa563a06d17eef1","sha256":"3c8fe1fc5ed2850b3e95be409356737584a49ff215226890f2d34425feea56b4","sha512":"1dd1febbb14882aa5d60759ba1af38971834fd2d6d7e24cd4151eeefb46434d76c6ca28155b62edf3f90560278ac54d9d40421fe315a2ea026d46a999e6f043f","ssdeep":"","tlshash":"5331a686306571a5e34f18d6047ae504963a742d300f0ae42062dd5974b47ae67fbfbb","first_seen":"2026-10-15T14:56:49.414217Z","last_seen":"2026-10-17T07:03:36.940293Z","times_seen":8,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/op1.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.341Z","timestamp":1792219933341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /op1.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"7ef-4X5NhZNKJU2qAzl29j6Dsyi4/K4\"\r\nlast-modified: Thu, 16 Jul 2026 16:07:41 GMT\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 2366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6R0a0R0Fznuhwua2xIjy%2Fjtzxwp%2FEAIWDXrmo3XmEFI%2BI9xRcC3VD5VTHH5m4yAsYC01u1jsPcmx1h%2Bg7gBsVCEZzdYCddO308%2FR966rGzHcCf%2B9pNBHFOO5Gm%2Fu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61175e755685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":2814,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-10-17T07:03:36.941547Z","times_seen":317,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/second-design/logo_blue.svg","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.139Z","timestamp":1792219934139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\netag: \"21d-rz3zMMh7ZsOPYV3cMGMu2LEf05c\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:31 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 1021\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BATebMJzNgVQP77Ihe1unDnxJbsHSYdoK91B4ktGKLJjTqf77uFBzsFcaWc3QOOC%2FDC%2B1r6dV8wUCouNgTvdca0ueFboR%2FacSiu%2F1%2FJr5a1LjskCCzLtKPBvzaeF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611c5f325685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1472,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8ec1594d32ef1e01bf0b313ce332be7","sha1":"2c1ea45657f677e2ac9e42eae9bfada889c5e7f6","sha256":"e5ae7767688696f53f5c59a09b9ae6b95ea37818d8b93d9113b043b6e82af744","sha512":"32493bf8ecdd493023a1b4425bf3dc33be0c30e463aed25e97a8ee4daf656803b2bf122e58c271d03d8b9eafa938d8139ee912014dee4697151fffd5a9a54704","ssdeep":"","tlshash":"fe311f79f499d836d224d26ceb94d425919482d7c4c58129b0c9ff2f582d8c31f1e3f4","first_seen":"2026-09-27T08:31:09.224562Z","last_seen":"2026-10-17T07:03:36.942472Z","times_seen":30,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/landings/second/register.avif","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.450Z","timestamp":1792219934450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /landings/second/register.avif HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"1718-LOEm9Pchoyt7/BPhyyhTIxrf1Uw\"\r\nlast-modified: Fri, 25 Sep 2026 16:11:26 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 1021\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBkddVqA718z3jO1Hx3joLZ5cjOTDyekzWKqRPQE9oqRomTAi2UsLS%2B3FXRPX7lT4ml%2FfCoxZ2xyCWfujOKZTIltxZTeSzbecoIhbWMkbtgSLCX9tM4dJXHXDP7Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611e5f805685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5912,"size_decoded":6809,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3dfb1e4faaddb0b3606aab9930cd8cd8","sha1":"2ce126f4f721a32b7bfc13e1cb2853231adfd54c","sha256":"50ab15ebf9171c6cab8f2439268ab055c1985f9d3f20e80ba31ff40ae5164e3a","sha512":"ead789be3e7b4999006ad7fe87e5959c3fab523918e9ac70d1889930840b067ca37820a816c8736e85a9cb51defdf18259edf45f723d86a5b393bc9b030b8e2b","ssdeep":"96:rGPsUBwHwYBcqpewMbqi/i1vcfXCWwz7cjTBqd/FjIbe9n03Q4kiy/ufMLA7:rGEUSXVpewu/0vefw/1d/FjIbe9Opy/W","tlshash":"ebc18e1a36af8046e4ba9eb3f2b06f263940db7cc2b4e95146a03271791c5e2885cdc5","first_seen":"2026-09-27T08:31:09.219303Z","last_seen":"2026-10-17T07:03:36.943337Z","times_seen":27,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/main-D-K2gyrN.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.298Z","timestamp":1792219933298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/main-D-K2gyrN.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"32deb-IoBDz0i2ZBjBmfooht+87Z5Ro2o\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:34 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U435dFDftas29L%2Bqcxh2bLroFO3LRQFcze7W1gAicBi3O6GemDcV11xbqEFE1KkUVgX5X2odrvHJNwxSas3UvdFrc51c0Kc7BIbeTw8GaB9525bI%2B0qDtfv5bRgH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61171e635685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 208363\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752093,"size_decoded":209184,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40733)","md5":"02a1421b814552cf9c740c939097f203","sha1":"71e86c5d9901c561feac6140e7bd3bddd389b472","sha256":"4e8f0cbe3d42b8db2ee4a38f143a01496f5bab658621dfb0e58ab44a8f6b9255","sha512":"ba07a111a7bc24aa82f19f8a00a7f11112967e14310ac77c5027a31e5e4c05b5ad599e0c675dbb9f3c653fb9d71625d78e0597d73d501af1a110589c8dd12cd9","ssdeep":"12288:tAZX273I97+o91twkct69VKeOuuhZPB04XwJ3VQ7TCd6p3Pe6Z7mNpU7NCKo9VRi:WX2DG7h1tJct69VKeOuuhZPB04AJ3VQV","tlshash":"eef44ae87196b13647e306f5507f0106b2381961740d8890f26dedef3bb544aa2bbfad","first_seen":"2026-10-15T14:56:49.420694Z","last_seen":"2026-10-17T07:03:36.944903Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/assets/betsSectionSkeleton-TVcugmtd.js","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:13.333Z","timestamp":1792219933333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /assets/betsSectionSkeleton-TVcugmtd.js HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"3210-nj9LIFQ+uM2mU/ndCwfBtzWGti0\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 340782\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbYV3m1WvB0jV39YGKQjFVyOTeaMHnKD9Py2RlEeBchuoWIs8vIXP1ogZDJ01wxKjyn36eJvvP1LAYG1xavOwwI0BGrm3%2FoXNLRO89l1MzfeOyEeCw22JRbRqopt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd61174e6f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45491,"size_decoded":13633,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45488)","md5":"2abcc5b59515dc5c708239600aaaf4a7","sha1":"17fe3280a5775f916d5d2cf5114fb7d8ad55db2a","sha256":"1d3a6ac4fe4024123bfb2d63188631f64547eace1b98127942d8dcfb33141cbe","sha512":"74949c4ce666fd05a13265843f0d190a9a52b7ea8180fc39b26a99954ed3e841d17e44834203e793509ce3a9ccb45b6393245edb2e6599197f48791eb0fe05d4","ssdeep":"768:ezs3jbiWKEsMdRz/3x10q8FVccFDS1sn+tj2oaEzhvxi3XNTpmJLCqkglxCm4cSa:x3jbjKwBB23lnf8xadGHd","tlshash":"da13dab2a25873bcb98247740623a013a37e257f30cf51e4cb2d4964b98644de6779ef","first_seen":"2026-10-15T14:56:49.371192Z","last_seen":"2026-10-17T07:03:36.945622Z","times_seen":8,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/landings/second/bonus.avif","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.458Z","timestamp":1792219934458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /landings/second/bonus.avif HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://weumax.com/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"18de-K0TgL1xu1rdYbABEvKWfaOR7XeY\"\r\nlast-modified: Fri, 25 Sep 2026 16:11:26 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 1021\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gU4u%2FZMgrQVbO8UdQaWorR5GVe8HA0PpcRjNxlUIEr5tCfs4gCZ%2BbY2WjZRkcBunbdml7tfVhha0n%2B%2F5eUDlKwGannPQFnl2%2FANqYSoUEwzm4WRMOQOhPF3p6nEQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4bd611e5f815685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6366,"size_decoded":7269,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ddbbc54fef7343d2ea284b18780bfd22","sha1":"2b44e02f5c6ed6b7586c0044bca59f68e47b5de6","sha256":"6d00963a49d0ae460d3b4fb755577ebb0396ce568b8a640788e6e7499249ef67","sha512":"d40072c82391cefe2d6d0d7ff647524bab316d949b3c0746f2bf2ed400a09e237673b95230b6d36d5abf1ffea325eaba4a74a527af54126719548bcbc2176ac2","ssdeep":"192:rG737xdRIVWI6Pz9VRzcFPAZ5I35KyuHMCgvM:rSxrwn6Pz9VKFPEqRuQvM","tlshash":"aad17e25a8403ec0d836843035e048d87ba779a86abe5fa947cbf24475349eb8d4288f","first_seen":"2026-09-27T08:31:09.206688Z","last_seen":"2026-10-17T07:03:36.946843Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weumax.com/fonts/Inter/Inter-Regular.woff2","fqdn":"weumax.com","domain":"weumax.com","tld":"com"},"ip":{"addr":"104.21.33.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://weumax.com/auth/second","date":"2026-10-17T06:52:14.412Z","timestamp":1792219934412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weumax.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 06:43:20 GMT","end":"Thu, 07 Jan 2027 06:43:19 GMT"},"fingerprint":{"sha1":"80:5A:16:BA:16:BB:D1:10:7E:07:73:F4:A4:13:45:AF:3D:21:F8:06","sha256":"4C:D3:10:F6:E2:EA:3A:77:D9:D2:09:A5:F2:6B:88:B2:55:9E:7F:20:1F:3E:43:B7:76:A5:D9:F5:23:C5:E5:D6"}}},"request":{"raw":"GET /fonts/Inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: weumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://weumax.com/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-2efad8a55b0447acbe7a29a24b157880; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-2efad8a55b0447acbe7a29a24b157880"},{"name":"landing_choice","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 17 Oct 2026 06:52:14 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnA63BEdp81DeEkGLCarFyVeWozTxJ2eSrebckH8W8hAcY9%2BoML65G3T%2BUg0tgmtpRCixgi%2B5stK5uv7aqqLpC8NyHBec8scZJVkDj8hltwRMvxd2BxWt0REW4zT\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b14c-o8AN3P0PJ4g5ujAw+uj7zyRQlus\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 933\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4bd611e0f735685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45388,"size_decoded":46264,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45388, version 1.0","md5":"4dfa4c83f23fe6251cc925fb1d57d268","sha1":"a3c00ddcfd0f278839ba3030fae8fbcf245096eb","sha256":"e530f99e7f301f446c085173be6c462c2a3b6253cf3f4558dcffa9cffafa1e6a","sha512":"867d7aee0001e6abc0c7cb47543b7d63d7c55a7717349ac3bfb09a5d3bfe0b4a2d78f12a5e67559a07bcfe06eac19ed7d889323c182e875e6a1bb0bd6b9d0fd8","ssdeep":"768:+sipLI9Wcb8r6EaBOTvq5sfyTQb4uj3qW5/dGAUJl38BUZo5tt1QgiFM5D8iqmJQ:2pI9W88r6Ovq6fy8bfj3qW5ldtB15j1O","tlshash":"3813f135e5ecc3db1d67ad7f0dc27f7e74b139f252b7a2c216021c94918895226a282f","first_seen":"2026-10-05T00:26:02.109573Z","last_seen":"2026-10-17T07:03:36.947704Z","times_seen":26,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"weumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}