{"report_id":"8774d9dc-bf01-41b5-91ea-1a890bc15573","version":6,"status":"done","tags":[],"date":"2026-02-28T11:57:05Z","url":{"schema":"http","addr":"waxai.app","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"waxai.app/","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"title":"Wax - All In One KnowledgeOS","dom":{"size":464209,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2713)","md5":"17c26117f93627eb3d7658ff7513eea1","sha1":"5969ea4016aa9e75d4b599ed7c0da80914dc0256","sha256":"9c8b5a373c7d3df5861d613d09c08cec15fa2b3a81e870d7ed343f9288c89b3b","sha512":"86f234972647057432fa50bb709ae7feb1e16b19f21061501bb0f0b473cfed9e1574bb39fa5191fadf78a801a0f1caf35165b4cb87081348dd3c06acf5441cb3","ssdeep":"1536:ioMU6Z8SQbZ3hJDdGHSp5LfjPTlW2SsdJjAcbuYdlNYLcgg09Febj4Gc03gdPUxu:idi3Db0bi4JTY2o7ZJZ8CaDcavpL","tlshash":"ada4d6b052d803f8f64a874fecb13d1925e234ebbfc45048f25e59925bb6dd1782e06a","dom_hash":"domhash845be3d9e8ad9e40e0b97d50e9b94cee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"waxai.app","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T11:57:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"waxai.app","ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":79,"request_count":79,"received_data":4589152,"sent_data":34619,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":4,"received_data":171272,"sent_data":2171,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":16359,"sent_data":932,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-22T22:27:51.54973Z","alert_count":0,"request_count":1,"received_data":88554,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"waxai.app/js/smartsupp.js","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66a1b8c6f1dacfba5347cafa0a58b14b","sha1":"6de31bd1bf05fc2ddda382bfb8890f07c346a084","sha256":"1c94613732935ae46ecfea0f7e56e9d0f89209f676c0a0efca02b1202c0ab132","sha512":"ea59e63fe3d9c7e279a3cb0a06eba4c7ff9fd200edf21f9cdc539357db63689a2fd6746c947e6580d801e7fea4b407c05f9457d5f90b82249e7ec10bdd6b54bc","ssdeep":"","tlshash":"4a818a1a5c901ca0037a1bb06a5be484fe26bf5f0198061f757cb98cef72816cbd5eb5","size":3890,"data":"","first_seen":"2026-02-28T11:57:18.155808Z","last_seen":"2026-03-05T01:51:56.421519Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-07T02:16:16.051013Z","times_seen":166067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/js/app.js","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c3b582bfd7bf324464952bcf18673e9","sha1":"5884c3938d3911c9d03ed4ceca884792a2ebbfda","sha256":"2858b5d108eeb6f1e909b83c26960ff2524e72a3b9ea37163037bb7539d5fdd3","sha512":"2d20ad814da6884e5386cb4e568fd63ad44fd8247850dbb9a96b46e24ea865f99373a3555883eb7f9b8f1e7eb1ca910dd16fede7fcb18e2aeffe9d8c1770d508","ssdeep":"384:c+kl5rtb+BVRl3KhRS4OwVUzmqmT4PQ1cMM3oJUwmYktsTOWY0X5tGj3QBKJP69I:c+kYBVRJcS4zVUzGT2ecMM3oJUwmYktV","tlshash":"1a8274e43e89b45e238f6ef73b3ffc4ad01d6898644845dbe545a80d68a472ecbe5034","size":18921,"data":"","first_seen":"2026-02-28T11:57:18.081192Z","last_seen":"2026-03-05T01:51:56.393253Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"waxai.app/images/Frame%207.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%207.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 31828\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-7c54\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unTcJUIpXPD3tLjRq39oJluoFUIBKXf28%2B3%2FxmOZBvonVSZfDLRaNXcgtDjDTIo5RlXe2X%2FDLerJErkjeU1Vx9PxwaKuCl8xuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c53dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"1aaa9399c9e0909619d570f3e476575e","sha1":"d99872d84b24f4d07bf6d2d64b6a8529d4f74057","sha256":"a8ff17cfe822a13f702aa88fe0760663d6ca5883c28ce0d96acc46b85a7470f0","sha512":"7ac5e01dd7ab5442f94d13042584c3f37e45a30e8a3fd37d278be9f420e806caab4a1fbc2197e422c782d37e44bb65a7b6f8bcc93fc2a650e126b0c75ea0b994","ssdeep":"768:x4QsFNLkLW8GO+ZhHvv7KHZW8hV8/R8VD0b:fsXksXhHuH0ECAD0b","tlshash":"9ce2e1dee8499c02ea9fa75bc8e5daf982a53136b0fdc40269651c3fb7d08131067a34","first_seen":"2025-05-07T23:14:32.954328Z","last_seen":"2026-03-05T01:51:56.416102Z","times_seen":7,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%208.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%208.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 28834\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-70a2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FO9riDdCNM%2BAqmuQZxWp3vrGVDCzPbCo09zEpSyGrCMzNr2vlFz8NzVgcJHbMCig4A0SQBkeJayUpvlgVgINrTKZTWAoNdDMaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c55dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"df15b93c0d52205fd950ed5c83b61b09","sha1":"534a6c928bf2b084feda4008f9213871b4e35119","sha256":"0290d453a3f75b829ea3d13537d498842516e8a3c4165e27ffa8f4e658c2f2ac","sha512":"d95e64659d1fa202aae6993d4eaf08c5da6d817f6af1195e9b2aeddd48ebfed9573a0786791b34dfb6b3dfeed507a3b25acf721f4f3d61b391626bdccda00424","ssdeep":"768:Va467NmtfRI85Y+5sjoF/G1998JLMoQVew:Vr67Ay85Y+QG/092aVd","tlshash":"37d2f2885717b5e62e530d6d28c78661a3ecf9c3f837e480412beedf80c686d055b6d5","first_seen":"2025-05-07T23:14:32.927131Z","last_seen":"2026-03-05T01:51:56.416823Z","times_seen":7,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/cloud303_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/cloud303_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1815\r\nlast-modified: Mon, 16 Feb 2026 11:17:52 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce0-717\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afmV2D%2BODgbjM6ycGPAa2Hez34%2B9ZjEnMby5YlhZd9oBrDi96ZyDIfdvp7XSqGTwk3y7c%2BaECCNSa3ft3lXm6t404h7a13k%2BUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85cc22dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"9e2f1d6fc3b8de842d3388609007b7d5","sha1":"2a62e73f76812d99b6463e129bff0e228f2569de","sha256":"2c72b80b296083ef4ecc33b6e2718f6bc836a20070af4a02e8a3f43089eea081","sha512":"595e8022d5235c9f8b251b44ce0e992d8e083e88f23536523e04f1dcdfb8e4697dd9f8dddee315d26778eec81112d91c8c18ceb7706824d76468181046e91341","ssdeep":"","tlshash":"e7310959b2c2aabcd88383f1c2e092ac6b9d2c1944808f1a083602a9441fb8081ed5a3","first_seen":"2025-05-07T23:14:32.945557Z","last_seen":"2026-03-05T01:51:56.422655Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/keyman.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/keyman.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2354\r\nlast-modified: Mon, 16 Feb 2026 11:17:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce4-932\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jl2BJp7FfKiibyqiLvugL5MBL%2FfUUnkpt6906V9wnvVQPdtn8KVUZxnIknDYFPLWZv6mLZqnW95Vw2uCoonJnp6gU1Wk%2FWcrzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec2fdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"ddde1338266ad4b38f89aa42d7ff6974","sha1":"06321bcdb5246f12268a3c3822c341a11c2d6ea0","sha256":"36579d4163bad237019107252d955f0c94556e5b5574fc46a7e398fe39f3bbd3","sha512":"9b9d557fa2226d2d4687a4e91764e85d688a638dc8c33ffdc2ef2a090b5c240ce76675db201af0ef4b94d84e3a78dc881769f32c6a877e7dfb41481a10675703","ssdeep":"","tlshash":"a3410ae867c7db06fa0c24414b6ae928aae11cc9cd2164e0a3afd094017bd574f4d770","first_seen":"2025-05-07T23:14:32.993859Z","last_seen":"2026-03-05T01:51:56.40553Z","times_seen":7,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waxai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 17:26:10 GMT\r\nexpires: Thu, 25 Feb 2027 17:26:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239434\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T02:13:02.566939Z","times_seen":205449,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":85,"dns":3,"connect":14,"send":0,"wait":27,"receive":13,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waxai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 17:26:10 GMT\r\nexpires: Thu, 25 Feb 2027 17:26:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239434\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T02:13:02.566939Z","times_seen":205449,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":81,"dns":9,"connect":17,"send":0,"wait":38,"receive":9,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/index.min.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/index.min.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRPtKLFKKqdB2TQTBph6fY4%2Bdxl4dwP2xK467DHW2sdBiRl1EjsNLRzV8jNyioN3a9HIaqb9hT%2BhkzaHJisXEGDQ0MEScVCYWw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcda-13c0d\"\r\ncf-ray: 9d4fbd826b9fdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80909,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fe9d71378c06117f2b13c46a39faaa70","sha1":"58d9be8d719a51b39215476ac9233f98ac858e82","sha256":"1840fc016cb59b150392b4174a8d9d598a60a75edbee81bf67d1c1181a746619","sha512":"436906a6a50129b49853089e21dc4c02dee334ff07749c956aead4e97150f3ca30fe2e01571c70d12f7ee7724ef713e615d88fc019ccff6c664d3b240eb3cff9","ssdeep":"1536:8iQgqxT3znroguNWxcnPDVBTSiWzrpZgcjwQvxNva0:8TrxjYQvxb","tlshash":"1483092df320603e211389be75c6f698fe28d841cb124baef355621d95da5e70273f26","first_seen":"2025-05-07T23:14:32.911978Z","last_seen":"2026-03-05T01:51:56.413057Z","times_seen":7,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kalam:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Kalam:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Feb 2026 11:56:43 GMT\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"640a86cdf0e835c6e0b75df17473a6e0","sha1":"f06cd0a049cbf00326e9ac51741bdab8a459f015","sha256":"c77708512b8d696b5e7e194252084e2320a03042d50ad9b23c4658d8ed61bab2","sha512":"ff3cea6df912c78aea58d0115fb906203569342a1df61f6a57769bcacf34b5110dd3f92824af518f93683d13d0ba5622a125cfdf76c8c7764e0b3015cfaac893","ssdeep":"","tlshash":"1341fc82046b9004eb571cc1a2ce7e36ff1e2261a444c575abfe08c8ad9eca99351b5d","first_seen":"2025-10-07T09:34:21.858979Z","last_seen":"2026-05-22T05:35:02.461442Z","times_seen":38,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":113,"dns":0,"connect":23,"send":0,"wait":34,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/google_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/google_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1778\r\nlast-modified: Mon, 16 Feb 2026 11:17:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce3-6f2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uzvBwcjcMLpBhiyk3ToDkxdT8a9VOhgj14amO46ZBnwllM8L6yLUSjUkMml3FRzSRhmu7URjXTYcCLOVtIYl%2BXoSeNLQzfTpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd857c06dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"4959cf6e2257b7e79c126e2fea151bc5","sha1":"cf803a8da6f22535cecf4e14b334803a2dee99c9","sha256":"3a6f52a3a96f5530f7116c4da41b0ce7d59bd972e50a6eee790c5307e1f790a0","sha512":"655fdaa356e000a084a70af8d5a742f37bd9f4b26b6381d69e21eab87fffd805dad04381b41d74163f1ae7eec996154831ccaf4bd36acd70cdd1932b093b4003","ssdeep":"","tlshash":"fc310936ae27a47c438b5beb4e23532e91c77c0ce2394935c12356b6957014142b9bb0","first_seen":"2025-05-07T23:14:32.914901Z","last_seen":"2026-03-05T01:51:56.404492Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/amazon_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/amazon_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1546\r\nlast-modified: Mon, 16 Feb 2026 11:17:50 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcde-60a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fhDwP3LVHOSLLoSVg0nJo%2FRAwMMIjkkMG0hNnQagaWyKaVFOECf1KJGkBksjVe7OtmUw9yN7sLg4Gjc%2BxBB00lLe%2B0R%2F2c3bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd859c0ddcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"668e91be89c3796562adbc24a0569091","sha1":"640feddf942d7a85ab454b94d4ea5f69c682f51e","sha256":"c57daec0acd98e3ce27c2973d84e55548ee636eff4c12ee9cadb2d4b174389aa","sha512":"e1a61268e89c1209cb23e22da05a3ea00c999608215a883367bc35c70a4d183c931409d48a44e7e1a0a3f5c50eecd9d13dada6a69e21488b2eda0a992d195653","ssdeep":"","tlshash":"f631b7a011dc6c5bf279e07e9fcf6ebb2b60418e47821e51d10a8dbd471132547ad761","first_seen":"2025-05-07T23:14:32.942924Z","last_seen":"2026-03-05T01:51:56.407703Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/ibm.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/ibm.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 642\r\nlast-modified: Mon, 16 Feb 2026 11:17:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce3-282\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kR4wu7ZtzszgqiQXhvOHTtc5zqvGKr%2FFnDyMqI86NnDm2WixRHlwDH1MIBF1lQNa%2B%2FI3vTGQt71eyAx4O6YqOz6YCchtRSXR2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ac11dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"9ed1294938307d8684bba9be099e52a3","sha1":"2e984dfb1c54d532e5647bfb7672bf49463e53c5","sha256":"ab3c625726be978b60d4e9fdbbc2ae49184215db09561ce13d41ea6dbd984b71","sha512":"fd94c63b1fc4bb1634619fd73f6063e8435db16d8d26f23d0bf5a54917cdd393fd8e8be4784cf0b346338ee348832d4c86b4366b641df20244d2046898fe30d1","ssdeep":"","tlshash":"4df002926e36fe7cf4398e31878b10659c8198948a124c449255fbd563b00a6cce0f06","first_seen":"2025-05-07T23:14:32.964524Z","last_seen":"2026-03-05T01:51:56.397303Z","times_seen":7,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/apache_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/apache_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1876\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-754\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRNUzHUBU%2FiPL2MBMfPZUmOZ0Kk9Ef2wYtdoYFwE4qa9l0w6fWFDD4ncnZe1%2FiWEvoH%2FBuCp4OxhJXFJzWIYHESFoBx7yiCY4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85cc1edcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"20feb80c1f5c7d318dc4535c864f2ee5","sha1":"d70361c2571767bace1a0dcc587ea1b5ef7d730d","sha256":"20352b9d7578d6dc8234bdeedfe6df67960aa04b84883675258aba5d30eab7a4","sha512":"00b0d4d193298992af971cc33cd2a7b7c42b6bfa928ab5527fde093bc719cf786bdca3b7e506427240504a9e8b715902441848c04a912eb5f1477aa905cc3df2","ssdeep":"","tlshash":"65315b894e5e3e6fe1712634d3463f7ec14a50616b2bcf7e2648c9420d3813847401c1","first_seen":"2025-05-07T23:14:32.959416Z","last_seen":"2026-03-05T01:51:56.436582Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/apache.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/apache.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3360\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-d20\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9E72n50ErsnIs6%2BkxrllMwcsny0xNaIj%2Bno0CI2EMelmJawpIX79y1o4vtsFC2i2vaOIKZRcYrdD1Gz4HDkZm27ilYqYiawRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85cc21dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"d1ed81c1f430e19f1f5f97d22e593fe5","sha1":"fab673826601f825caff2f0f6c7bd6d4ec4d2169","sha256":"44da773f37f9ad8c29bd3c2310256f98a177ff40a293c4573c87636c8b6bd52b","sha512":"f2dfec0c117ef2f68361fb17e3286c76645c5bd70c1a73ba06261af2be59404f2251756339fccfd5826184bf1cca7085af14a904c0d04b3482b86f58e22ff54b","ssdeep":"","tlshash":"12614cdc97a11035c798a57aed918d3d4d52438f22a498f17c32aefb1ca5878578d0f8","first_seen":"2025-05-07T23:14:32.944097Z","last_seen":"2026-03-05T01:51:56.400783Z","times_seen":7,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/airtable.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/airtable.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKAbQUqCJkQB7YqDj7S3JAFFxnMGSZXDtFast0UaAGUYekYA9sDKkBTW41Qk0BKJekM980zNGWUrGj2ndWqK1tPJlqWP7DD1JQ%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcf5-72c\"\r\ncf-ray: 9d4fbd85fc32dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99547379ea1ae9edf638b403ab1ce66b","sha1":"1a8b1396c0beaac59a439443305fa5b506a9b34e","sha256":"1d5f2bd7ef2f569d76342e5de7180b059f2aa582404f041dc8506463e9415338","sha512":"caf6728942be137bdca9ed492b6bdb9fc83255946b2c1927f03cd89ede8bafaf142fc6d281e6aa44fe99d38ef08f64043cb295acb64337d7220ef64a87878157","ssdeep":"","tlshash":"0b3175a537a9c3b1fa095fb89b073430a62a30cf648240a9c7946d207c1542fecd8dc5","first_seen":"2025-05-07T23:14:32.977917Z","last_seen":"2026-03-05T01:51:56.3946Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/shopify.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/shopify.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2368\r\nlast-modified: Mon, 16 Feb 2026 11:18:01 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce9-940\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B89dkLB7QnN9ysk%2B0tosGV1freWN9jec8n6%2FhSwl8op7vZ%2Fv2J7UJhgjcGtwoiPmEe2QgYmVDUZh9xih6op4Ryxr11lvrlpJ4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85bc1ddcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"dcfade182d21377d1ace0ed00bf9957d","sha1":"96c160381adae7b71f26a176cd5024b9ce469719","sha256":"458e605a00b2678d447b11eaa9ad324ac1383fefdec54873f2412e89b92f5b66","sha512":"1cf3b5d5f7fb1f2d3089cde64a1f84e4a43a4e0f7dc47b0e9284477134def4414a79d2cdd55849c712433ff93090a8d39d2df620fe18f63646e39b69b6aa03ea","ssdeep":"","tlshash":"79413ab22bfad8f63a3b0c0a62ad8045e99cccc9d3364dca059b90ac3fdc540227644c","first_seen":"2025-05-07T23:14:32.986101Z","last_seen":"2026-03-05T01:51:56.394057Z","times_seen":7,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/sap.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/sap.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2408\r\nlast-modified: Mon, 16 Feb 2026 11:18:01 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce9-968\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMEynXlXzRfdpNjLMDfzqfnQSZ1FRFMrQjLYsHiyj4MBSUMPjMIQ%2BaiUuLwRS8rv2gb%2BU9Vkr9YMr0kC0AnhyuOV7Vd8m9Kg9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85dc25dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"5818783b0b805c768e7866d27ee76784","sha1":"63fcb0248d9d01e5b8d4a07d995107a8f4ac2409","sha256":"52cc0b72680069a298ab2349d5e798e0013e14d2e765db68c1c984b94beec774","sha512":"24f2acb01321dbd21714c6fc3432270d0a016d7baf47394913ff4a21a3f0bbf0719006f69c82ce4bfe4a05f50243934e821e5ee804c62adcd02313a2997fa2c4","ssdeep":"","tlshash":"72415bd62a04ae0c452d5c1711b63e3818d5ba5c13793fa3a74c57d5207c8090e7a9b3","first_seen":"2025-05-07T23:14:32.905786Z","last_seen":"2026-03-05T01:51:56.391301Z","times_seen":7,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/arqcap_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/arqcap_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3690\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-e6a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=po91kjV9GxP24fjPk8vsirEOMTwO38pt4h8PWaLWrGZ1Dkpt9uy93NtJ9mon%2BrSBKw7z4aUh7cjINFlrSdMQy2ipZwDmkQ2Yuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec2adcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"6403c2a732297ac698e8b952a937351f","sha1":"00c15055255dc449a9f6706b694d7b4465fc271b","sha256":"1d1af77e3c659edd5250166e270ab2b5d7f6fd0529f1e1648561d0079ce99296","sha512":"967516400893b41fd6d1e8b487684d190c0727a794032f1b98520b53b3db77c662d677616405cba4173481abe5330dd2d02da021746f21ef3714ddfdc0363452","ssdeep":"","tlshash":"dd715da44020ec6c93610b7b94349bf51a5c04e95add5e4837209a7f0da7a3734fdcc7","first_seen":"2025-05-07T23:14:32.92369Z","last_seen":"2026-03-05T01:51:56.425233Z","times_seen":7,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/bonfireleads_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/bonfireleads_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3829\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-ef5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8JiymZlm3y1%2Bv7aduEx3Xzq8ZxZaJZlXvMgSY2PiPt1jtPjsao5jext1304o1JzSMdDtVgEdd%2FoeXfOFOMq5Nn0BmNooyfULg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec31dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"03287ee4075b2234e8d5514dcbf006a2","sha1":"c2031a0652d526b1c0ed2c7119fd96bc4581738f","sha256":"430db05928fa0fde6dcfa07afa008915d11992880bd77969f9b4dfc0ce1955f0","sha512":"bae503626d2e4e8b065d71f15daca833a296c5922143d5ae711a2b920ce354516b95b3062374dc8ea2cef07d586626ee3c73c78ba8f6390b872f5b2e2702ecc5","ssdeep":"","tlshash":"db816c9ae2e9158acab8c0a7576447d3bc1f0b27b731b01f401190895fe6b5bbda1ad0","first_seen":"2025-05-07T23:14:32.970138Z","last_seen":"2026-03-05T01:51:56.398331Z","times_seen":7,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/notion.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/notion.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfBdix%2BF528xcZMuRcKFO4Psn55Oafy67ll0LoS8uqEeQgOm6cDyzejEmFOsUyF8eKRLhL5SSpy8nm6ErdbcB1ZNhLaqZw5tAA%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcf6-c84\"\r\ncf-ray: 9d4fbd860c42dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3204,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57f67b1f14e6046b600145c12fda09e","sha1":"4e621b8a15f9b26c74abecfe0e3c44fc69be3b17","sha256":"9a71d3dd852566b5ea213466858dc942008101b9f57d54fcf6c4d87f51b13b7d","sha512":"cca27bdd0ed6e886bbd9f0c56f851b95b17a86bafea76546c40395f4b6f94cfbd842b68fa9a2d4591e4f46bdd08172fe7c94ed2a3a576436565379064837ebd1","ssdeep":"","tlshash":"286194a463f5a2f9f601b3b99b571460ba0f78e93a01c464c3d27d42ee4604d98a9dcb","first_seen":"2025-05-07T23:14:32.908698Z","last_seen":"2026-03-05T01:51:56.433572Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/trello.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/trello.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0ZTPhUy%2FX85W69xhQyhsEtEpw5TdQa9fYjIAACTFGuzqsqL%2FM3255X22UPVs5S3m%2BZKkGNVA7m08utk4%2Fmkk%2FEC5ns7FwqHsg%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcf6-558\"\r\ncf-ray: 9d4fbd860c41dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"723f15691d4378923d04d89a86720a9c","sha1":"327abdd4d79c10fe01ffd2a1c367d3b51795f30f","sha256":"06c6b53f11912e44e19756d12ac84b5d5a443fcfce67e7a60d96b7ab05a0a651","sha512":"6322121610de3b12f65aa1eded1e130586f96aec3184abf4ec7315ba6569150b981f24939bc9419b93ca890cc221186757059fa9032c747ea91e50660a992bbc","ssdeep":"","tlshash":"632156b2635d819af518d32dc8b580359496d0d9f74cc8d0e3647e2bbc184db5c9abc1","first_seen":"2025-05-07T23:14:32.961514Z","last_seen":"2026-03-05T01:51:56.398783Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/2.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/2.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 225461\r\nlast-modified: Mon, 16 Feb 2026 11:17:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdc-370b5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzURGPniaLL5ZnrQfx%2FyRMYM38bTpLNgpuEimMAY72NaKl4Cocw8KJosUHgz2rqIp8YNXOFEI94IsEn4sceFQbmdw4J6iB6Rcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c49dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 816 x 1056, 8-bit/color RGBA, non-interlaced","md5":"fca485432a0719fd1058df9a66e59f33","sha1":"0fe7c0ef51ddaafb4b047450c7542092016414df","sha256":"34e3f69df747b03743e992d8510865fcf713655b81e01eba3a9406728f6b4663","sha512":"9132bbb56eadf8d7e41e307e23788629699302278079bda635aff86b84dc9a13d006a8dcb2cf6cf1503f2dafea5d22203f513bd5558dec17cd53e77194f4aed3","ssdeep":"6144:h43Rr6XIVDtAjZGcXNVNnx51zBx0bkglpB:h43R2YkjZGcXt3hQbTlf","tlshash":"472412051272c6ae8be2523957d12e79533ad28be0bd2f318aa150dd160add3dc78dfc","first_seen":"2026-02-28T11:57:17.981111Z","last_seen":"2026-03-05T01:51:56.406892Z","times_seen":4,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/price-model-cover-big-screen.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/price-model-cover-big-screen.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/css/index.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YieMlP6aS3sNQHCafhec6xEwkHKxUgJmel9AOs2yg5Ijk1ITJ6T8u3eU3tbRy5fRxXPs04SKqmQdqi6OGBg22y7ObfkqT48BKA%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:00 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fce8-896\"\r\ncf-ray: 9d4fbd862c51dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2198,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc8c279f42e9d6234964e374a205f3fb","sha1":"60f649638673f264cc1337fa3b77a09f1570470c","sha256":"a482c9102644761ea25489522cc556b1a1b2b94d7d3522095d757d650843ffd1","sha512":"b0ade4e74b8bbe1b69e96a9ac0b29f1f531a751a96279b240d80c87593e13efeac5b983087b80039bcee827811270ab0678892aae2e56aa914393b45b8eef5ea","ssdeep":"","tlshash":"b741e25973a5790c6d80438ef39ea4d1832f50f2a91682448c1d7b1aa155c8ff9671ec","first_seen":"2025-05-07T23:14:32.925916Z","last_seen":"2026-03-05T01:51:56.389071Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/zeon.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/zeon.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 543184\r\nlast-modified: Mon, 16 Feb 2026 11:18:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcf2-849d0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nvu%2FD0%2F1wZugbg0%2FU1QLE5SHs0F3QAMGtZHxiqRhvR%2BnjAv9LGg1nRrZEuAacxrZK78KOl9G1AZPovrS%2FsAeyXNZrL1i8QM62w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd826ba3dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2160 x 1500, 8-bit/color RGBA, non-interlaced","md5":"bd0c673c103c01c7369279393fe31e84","sha1":"db4e244cd48155a38abf91d675da8eab5d47abf5","sha256":"909da37a4799b1eeda19fe6f1ddf634b67ed38bd2bb312fa3a852eb746ef4af0","sha512":"5d5ca132e5b39bf963ae63f8051390023667bf805d88e7795a9e2f26c17b6d5499655845be42447145a1692ae6a31bea92698c6cf48a211eb4455889ab82e6ab","ssdeep":"12288:P7qsBQI+C6fIMlAdFEh8vw3rfb4hnN1njVwVjaCXtfRZUPREfNys:n9gIMlAgqMn4hN1njWkCX1RWR8D","tlshash":"c9c4124420f2d749de23747342d52fa7abb3c2a666ea1a2df1f0c04ed919cbb19954c1","first_seen":"2025-05-07T23:14:32.953209Z","last_seen":"2026-03-05T01:51:56.399811Z","times_seen":7,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/microsoft_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/microsoft_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1275\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-4fb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2Bms9%2BYFBm7vFsuwQvLOga84VEFnXSnCm5MUUJuMW6dwhiZEkPD%2FmOjlmx7pnwtREsgenHiVNo63w3ghGpykIbUFkJY6VOETbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd858c0adcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"eed9d8ec6f3612d06194c0bbb9f9a711","sha1":"2bb1176e110d7ec5bb13946baf9213ddd67800b3","sha256":"26f997d442f36ef10e0b2044eff6dbd315f1ad5ff003c8d8461f2a12ad60bd6f","sha512":"b1a4f71372477bb99e7a7d46a0d4b15e5706c1305760b5183be29d8ba3836683f9842000c5f117c30fc067ea92d085037333daf0f4f993706c978db7b5de178c","ssdeep":"","tlshash":"d421b78ca5c005e94980a733bc67c3eeac28212a73d537462c4ad2626ce5064d7ad44d","first_seen":"2025-05-07T23:14:32.95705Z","last_seen":"2026-03-05T01:51:56.440384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/meta_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/meta_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2019\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-7e3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZwQIAwxS7OjCLN5kQTMpRosrBKlJfVYFKb3rMZwTwkgKcIWpJFCZeYpYOH%2Fm1sXrgP3Ove0hJaLZmrrSLUAQpbXPKdDGHTmiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd859c0fdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2019,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"647052bfb64247f4a6a8d04540db1aa4","sha1":"a9b97ca8568aa7fe50c5eb83cf7221f8c4e78f9a","sha256":"9284c88ec8ea4d87a437d24f05be260181c124aa400af668d77a5028103bf31b","sha512":"398ea3001b50f44d0dc0c81bf2c7fc7012350e2bc3baa49595ad267da17ffd85dd790f37ad62bfbc9d427cec16d35bd179d2c51309e2ad6db1b511b4816ecac6","ssdeep":"","tlshash":"66412af373a48ba442549738b5de56596b1ef46e4d4b62e3046202a71ae5010c53521f","first_seen":"2025-05-07T23:14:32.958164Z","last_seen":"2026-03-05T01:51:56.429788Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/tiktok.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/tiktok.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1047\r\nlast-modified: Mon, 16 Feb 2026 11:18:03 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fceb-417\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29cMFIAVWZi31ddPR2XT20GzCRe13mtSGbN%2FVMhLf1CgX19%2FrYSF18BOFOVdbUdo%2BKDLNbBGJWynXaVqLUXWSZ%2Fz4vRAkZ5kcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85bc16dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"0b0f76be6613c6b3ee86a5e7420d76fc","sha1":"92a8795a6857022d9e0e6b15a8b6485c30e44956","sha256":"c96becc59b6deab2d2c9cc511d4d97a7193eda479db5a2b2da970124d3b8cc77","sha512":"6cebe5312a7abda3d7d1cfdb7c9e19b7601ec443612aed59044500ef6f572a334817197ce8321e7dd99d53567470e75029a377ccfee4d64123169c61e2981368","ssdeep":"","tlshash":"b911c8e78f04a6ecf5f2fe74058a8032799645170098440b751e88a3447fc1193f30b2","first_seen":"2025-05-07T23:14:32.967978Z","last_seen":"2026-03-05T01:51:56.418672Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/bonfireleads.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/bonfireleads.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2776\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-ad8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H03uJcLOfjh73vdczAhEyMlUhxYAEv7WM4BTTbrTqzc0JK5YE9pYNGQmI5F0IANXS0kJmXz%2Fw9%2BAdmCOKQepIczmvq6Xak%2Bebw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec30dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"f5b792e474b8851e6b8bffeef222d8c9","sha1":"c4cfa4d3391c8d52f3fe45bc24e814ca45238c67","sha256":"3cf7e263149fe93c68c7158ae45b5d9f467ab370c9f2c77c67d1f859d79f9d93","sha512":"8b566cc50c8a75317c934d46b05a7359cfa9a518018d19288581c2356f33f4a90e8f754d4134d47c86a690eff575afe887d1006a9ee01fa747768f532b1b9d6b","ssdeep":"","tlshash":"80511b5ab08b7c4eb796079399421e5407f2a0dd1d3e44fcc6da0bea2aecc654ec4512","first_seen":"2025-05-07T23:14:32.930921Z","last_seen":"2026-03-05T01:51:56.419164Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/camera.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/camera.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 118441\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-1cea9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02KhsMhVchZ78D3YtgcgtUIiFf6y%2BPSpmNes2qPF3u2UhjV3kJ1S0JfAywaLN4VPDBsd8G7goy9PwmjOrr6j0rV%2FKfhz64I6bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd861c46dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 520, 8-bit/color RGBA, non-interlaced","md5":"cb9cde7351994ce8c627a3911b5b45bd","sha1":"dcbd4a9ef21bb006ed45837cb4887a8c672000bd","sha256":"def0b1dbd02d02d85c1f28b81163d01294d242e28574184d78d9c09153847922","sha512":"13dfaef0582b0db5268c238a4fc4f09d13c87d35430ce94b8c42f6e79f11ba0f3039f2f14bf13a6a4efc9df4f34d50911cbd2371d6204de14fe87d7e3a52271b","ssdeep":"3072:jbd1hoSrJCuUhfbvQmj+BLRAIE/K+9PSvbfDdf2JHyu:Dhxru54mCJg/KESvl2JHyu","tlshash":"34c31250d991e90e598d6b3ec9be6c72c03fc7270ab71d9fb835d47a8b150ae01a781c","first_seen":"2026-02-28T11:57:17.990249Z","last_seen":"2026-03-05T01:51:56.408988Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%204.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%204.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 7020\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-1b6c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkrx%2BvAGjJBc8vNR5QJC%2Fz1V6qQS3B7J7kLFmZ%2F%2B8krKs%2FED%2B179nqLIzTSf7VB6C9iDCBvnUfgjgcN%2BxNIqAfab1AsdCfL9aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd864c5bdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"c4218ca6f29c3c9b1d1d9fe93bd32298","sha1":"c0926e3c48b3dafa5dc8dbbd255ead16d72c618d","sha256":"7eb5b8b3c2448393e00604955d929ea3b1dca5abce8438d093a90735cf881e9c","sha512":"62d80dcc9e29a2df742b80630e74f7b5880f0ca460e16d026dcecc48504aa0b0a41f5883be84517f54e350c4ffaaefee523c11f9967024a210d3e7ca7cd1a83f","ssdeep":"192:JhXcI5mF1qyUAg35UyQuvbv9Mm36gGYmaeSs2928PCmU:fsqsUyUuuTv9d36gGYmH8NU","tlshash":"a7e1bfdbbd9042c54a77e1b24a8e0807aa1d4fb8d7657c00a7ef2f8c4f3951416c8370","first_seen":"2025-05-07T23:14:32.924891Z","last_seen":"2026-03-05T01:51:56.438245Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waxai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 17:26:10 GMT\r\nexpires: Thu, 25 Feb 2027 17:26:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239434\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T02:13:02.566939Z","times_seen":205449,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":185,"dns":11,"connect":29,"send":0,"wait":46,"receive":4,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/entry.6864aa5b.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/entry.6864aa5b.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8hGaGLsJ83HVm6LwvI7OUQa3SULXRlaR1kcX7bLXjNUsZc0ULmuCu4PcyhivGGDKZX8npDKtvXQYOcTHFEmDKtNqkeS3rCtPw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcd8-919b\"\r\ncf-ray: 9d4fbd825b95dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37275,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37266)","md5":"9cfcf8c79a080054a88fac01f76b2c29","sha1":"a6f6083e63a44a61b797bbc670ed88bf2ba9c9a7","sha256":"c60b7558b603af6fb3d99b4932d09a55ea5815b81e264703fc48feba33561713","sha512":"d42b6de7dd2bb9179d068a9682758687115d82a316522667ff34f195bbcd41583bec51389074f0f27cb21fd5ff7e78cb4f5ee2b5c65299191851a612b6cdaafb","ssdeep":"768:qfQLZTuJFVGBcLTSiWZP5DDZgcjGtZ6vxqvbhOzNaA:qfoZTWfTSiWZPBZgcjoQvxhNaA","tlshash":"81f2c60bfb50543b3913886f65d5fa6d6a14d981cb111bbaf6046205bec26bb22d3f33","first_seen":"2025-05-07T23:14:32.919924Z","last_seen":"2026-03-05T01:51:56.419962Z","times_seen":7,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/el-collapse-transition.155e27a7.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/el-collapse-transition.155e27a7.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsi1PcA6wrFNZPh8H9lhiPbC%2FbsiuiwADe0whv%2BllfEZnGJBjoFH4tu8EVPCBhrlyWJhOM9d0kaKIPJb%2FGe201QsNP6oW2GfcA%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcd8-e0f\"\r\ncf-ray: 9d4fbd826b9bdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3599,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3598)","md5":"ec64dc7d63b4d6f768d7d234452a5e40","sha1":"9c1591ca7420589128b7b99fb53cd263118d4d67","sha256":"155e27a7a76f77ff66cb3838ae612a6ddc1ac9c5ce4a6abb56c2da2da1575e4a","sha512":"8728d7bbfdd3dfc933d912da13819111c60addbef82598c5cba071a89860a8737a35ca8742b7692784de754fe92cd927c9a7ae1054d1bbbbd7b6cf7452e3a28b","ssdeep":"","tlshash":"a071ff697b5e723cc91b45fdaa889c5ce928dc91d822d7aaf52c525145c3af033c3e34","first_seen":"2024-05-15T06:07:57Z","last_seen":"2026-03-05T01:51:56.42866Z","times_seen":15,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/hover-spotlight-card.53279be7.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/hover-spotlight-card.53279be7.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NwDq5dN1dlu%2FNZoMQ%2FQjz%2Fd%2BmuQ7v%2Fjc2aY6ct5AQISIJcSfcPTnzQzRYSomlmAr38yp5ZeStz5WpJ4G6eRXfolCmOPlXhFKw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcd9-4d2\"\r\ncf-ray: 9d4fbd826b9edcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1233)","md5":"f8686ba40745aa31dc3d9afb0081af69","sha1":"45f9ec058b5301c482d96f9bfffd51b03fb4fcf0","sha256":"53279be798a2b91edf3f1a9b2ff5c7a4a6daa8d5244675f5255caaf823f27d00","sha512":"5a2785ac57b16216449e370ff43e951bc5586acd6d937935e23f9970322a3393fb13694fab85ceb63717ed5e09c082357ec693e9cdbb898929b2421a79b91fb9","ssdeep":"","tlshash":"5221ed9d53085076e02be36723bcec1cdf3aa980ec22151d7059541976c3ba55733aed","first_seen":"2025-05-07T23:14:32.981928Z","last_seen":"2026-03-05T01:51:56.421016Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/meta.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/meta.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1327\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-52f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpX4jChrQsKxPcuMYg70MMKKF4wpcgrwb5an0GPX45Mbk%2B0QISGubfPizQj%2BLrSf9jWXEmsCMyS0iOyJcRV5a%2FOwUHxpH7ovTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd859c0edcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"4e24b0fc7f4f73e5c9173f202cfb09b6","sha1":"ecbf92b0484042717660ff24693099a24a9f89f7","sha256":"48bddbc20607fbdb631c5197cb717635330cfe7369480bcdec9b6f86eb060307","sha512":"674607ceb7d2af4cd0b539f4bdf826e53faf4729ecd2d840fdf47efe7d5456b1645fb90b493d8f93d5c579e22985fda2a6d4d7da6ad90d5774d4be6310ed5c5c","ssdeep":"","tlshash":"ee21c8f622f96faef0e353b6030207930d42c465e409885bf25b8692079489c0dc364d","first_seen":"2025-05-07T23:14:32.941536Z","last_seen":"2026-03-05T01:51:56.417871Z","times_seen":7,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/media/hero-cover.mp4","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /media/hero-cover.mp4 HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:44 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 8180685\r\nlast-modified: Mon, 16 Feb 2026 11:18:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcfa-7cd3cd\"\r\ncontent-range: bytes 0-8180684/8180685\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BoPet%2FXSEVLJWhy6LPXqxVb07WkfzDTJmfptW%2B%2BclrfDlDegz8d7Re2l2xm7U99bILqIJutJpvIqXjCCA4oekPjJBKNXSRnIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd876c89dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a76f71d1437878ea128c2ecb243cf350","sha1":"1fefcb9235b1e1a9c320bec25769bf348f24ac48","sha256":"c2ce26698655ecc1b1bca9174b0cf51c011865f0e35e52260ea3094b32467cf1","sha512":"e3314ee970825488b6056b3a2af890c71b44ab8a2f83aef1dadf3c38e6871dcef8c30819d26ca89018a47be109d119b5a9cb5f4ecfd7b822f1fb3dde055a9362","ssdeep":"24576:vsM3/thsV6XumCKxXbxKzfFyolRwOyeVdipDd7d:UYqV6Xum71bxKDFd4OmpDdx","tlshash":"d12523a40ff337cafc768b75de586391635497a20b44a7c3c62a69d234e114bfca5a03","first_seen":"2026-02-28T11:57:17.998792Z","last_seen":"2026-03-05T01:51:56.424069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/stars-on-github-button.220afc08.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/stars-on-github-button.220afc08.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RokH%2B2yRtKACBRDheNk%2Bf1UMXpx4rsuqwniGibC2QtaGYZgBz4Us3H7CwrGOP1IDsFO4fVkaFiG%2BwTUvGgkRk%2FfiWAPOJe3keg%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcda-21d\"\r\ncf-ray: 9d4fbd826b98dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540)","md5":"8a420ce0631e05c2451176c2133aa7fb","sha1":"20806e9958ff2eee9817c29dc43afd1d5026cfb4","sha256":"220afc08320fe416a0d13af7b02eec56ac1a4d7f17d05855b9d29c267da0fdb2","sha512":"5a17a722160ef45f4df5a3c44fc09e03917323e870a94e6881f6a6c069c2dab19d3ec6234a05c97536fb71659463538f2e3a24fcbe7c5b1a5cd0c194e6134df8","ssdeep":"","tlshash":"99f020f2723830367f1ee598e0ca7edd30b45a12d702c18fda74691ccb0933e085280a","first_seen":"2025-05-07T23:14:32.96672Z","last_seen":"2026-03-05T01:51:56.412538Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/zoom.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/zoom.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UszMGfh274Th0dsZt8B6C7JSwMtgatDgnEjSteWXmzYB7G3JK5JlOhHv2fEyH5qbBiNZwwyNDNJcOsWq93nq6Q9MhyK6VLIhKA%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcf6-4a0\"\r\ncf-ray: 9d4fbd860c43dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6de800e3d659d2daf01afacc8bda0c90","sha1":"fae82cf3e457ae4b8866782994ae02ddc1cf8d7c","sha256":"88cd504a27f6bc418eea1ac61978cb50ca6519d4253dcd358785ca616ccbc1ff","sha512":"e9892db749fc4d70aa7b966d96651da05af2705ec65f487aeff7110894fa3b2f5d107e51be30b655989ddb9be3f62ab2f4b94e9241d5090db11333d92930a201","ssdeep":"","tlshash":"3c2151702064f27cd900772982d6b072797e21fee829c1c0d3e23a247c8841f89a9ec4","first_seen":"2025-05-07T23:14:32.90989Z","last_seen":"2026-03-05T01:51:56.402555Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/5.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/5.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 74769\r\nlast-modified: Mon, 16 Feb 2026 11:17:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdc-12411\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4HTHHqrlM6gzW3%2FUHlOUpowAeaN%2Bv7G1obqyrXeGKJaWipNyau03hPHftWew%2FqfcH6HQ00WE%2Bs1gExsq0sTlBpsxsQPgrY5kA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c4cdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 816 x 1056, 8-bit colormap, non-interlaced","md5":"f0f0c9438d708e3224686210829391e6","sha1":"cd2e3d2d122badecaa08c1a982b64cf74f7b3e5e","sha256":"fd8d76a08d91add08a25a726df381b801550d8c6b3378c888571b010da761b66","sha512":"833ac2478290aa60bf1c1970a3f1f82b42ad8f0b5a2e4a4f4df474ed61080b9727025ec6f0fa1d260da2bfe3e839212b17c3ec8f275abf3f58cc031e678274db","ssdeep":"1536:dzAdtUYQ0ILb6Z2mbbU952Nka4v0sw171fLJZ8nO3xE3hnkNgzY6YOq+SJt2Ae:+QZLG2mbw9jafswB1zr80E9kmmOs2n","tlshash":"6e73020cbe176aec82bb064c0f7d728680a69179b7a87865dd902dc437d94ec08727e3","first_seen":"2025-05-07T23:14:32.948836Z","last_seen":"2026-03-05T01:51:56.425732Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Write.jpg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Write.jpg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 132396\r\nlast-modified: Mon, 16 Feb 2026 11:18:06 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcee-2052c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9aH4UG%2Fi%2F2NrIRHE64kqzZeIz2QEP2qMzb1DWsQ83p%2Bf9UTwoT9X0L6rjXtrxG11gmigSXpvc%2F13uqnmGsFhD6BXZJnkF9z5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd826ba2dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2160x1500, components 3","md5":"b0fbb589736c171882c22665df8b9e95","sha1":"39ab26d625ea1ed995f190235183b66174cdfe8f","sha256":"c5d68a7b10f8f55cba4e22126f66f3820cf04df1a6a574e986822cc7c9e1080c","sha512":"acc4b2acaa740d967e7221431051c8294d59744c1bfb3ba985753d0bcc70de68d0214c6c7f397463612c70a2dbce26b42168d22ca2cda11ff50897bfe220a640","ssdeep":"3072:WT7swzCt9hvftx05pp0F3Mh8ONlYcU17QRvG:WrCtrtc8QdNlY35Q5G","tlshash":"1dd3020b96972e39c873043e8c925e79366674cd3f8dc84d259b5e309427ebbb9b3106","first_seen":"2025-05-07T23:14:32.940115Z","last_seen":"2026-03-05T01:51:56.417309Z","times_seen":7,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/media/hero-cover.mp4","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /media/hero-cover.mp4 HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=8126464-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:44 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 54221\r\nlast-modified: Mon, 16 Feb 2026 11:18:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcfa-7cd3cd\"\r\nage: 0\r\ncontent-range: bytes 8126464-8180684/8180685\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9h%2Fl8dtzDUHv%2BO9ml11ReFZWK7mB%2F5Ri2x1y6n1FKZMWAJt8V3GJb6%2B8UoUAYUYb%2BH10bYV5VDh0xQSoz5iOdX6w72vjj9%2BKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd88dcb5dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54221,"size_decoded":0,"mime_type":"video/mp4","magic":"OpenPGP Public Key","md5":"4931f13e9f4551e578e512d6e7329266","sha1":"6fc25fbedd99e6764497d10b3ff9567855528cb9","sha256":"b67b9b81630b20876e23354d6ebac7587e666814c0e180e1fc8b1819a76fdf80","sha512":"5e84c3c515e5ddec607f7562656047345e1733ef2cd6048db50b44ab3abaa69c586afc4120ce4d7344fe365ab0ea5c26d7d2066d81dd89f37f127529f9edaf95","ssdeep":"768:DS9kobLUNUbUhdr64xR9wtUcBsSew2oSrT1Ye4Z1/Uu5++iA1k2/Rs7dE:DS9kKTbUL1etUPoC+tdHD1n2e","tlshash":"9333ae6aabf19102ee34173d98fbd7107331c0b8464317db671cb6aa7cd63a09d964e4","first_seen":"2026-02-28T11:57:18.00542Z","last_seen":"2026-03-05T01:51:56.426533Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T11:56:42.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aP2WUjQ5WdRH18In7jtmcnlpDVZ59TlWYTFDdzBmVvQ9BMXYKjFcqzzGbRIYrkX3tLkZy2v%2BJARS%2BN2Vs%2BzG1TItwO6kcpCmjw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d4fbd80db2b4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464000,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2713)","md5":"465dadc22070fafc4b85e883173c2e72","sha1":"bfac3abbe97fc1c4f7593c02ddc1360d903c0106","sha256":"cfa28210453d8800118fd4fd754377c1d90a91674622f6109fbb19512e2ae1c0","sha512":"c224d57d509c43e1828bbc292a1f12169bedb9bc49bd2022664c12ad3d9dafc6f6a6c750ee77e0dbee49b5ced7af29f0c3c1cf51dae1e3afb17883aca5e373ee","ssdeep":"1536:yoMUBN8Sf3ZGhJDdGHSp5LfjPTlW2SsdJjAcbuYdlNYLcgg09Febj4Gc03gdPUx0:yus3Db0bi4gTY2o7ZJZ8CaDcpcM5","tlshash":"70a4d6b052d803f8f64a874fedb13d1925e234ebbfc45048f25e59825bb6dd1782e06a","first_seen":"2026-02-28T11:57:18.009858Z","last_seen":"2026-03-05T01:51:56.431725Z","times_seen":4,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":76,"dns":47,"connect":8,"send":0,"wait":71,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/sap_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/sap_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 912\r\nlast-modified: Mon, 16 Feb 2026 11:18:01 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce9-390\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6VXLhFCyq8DpYYkte5pHDEvPsmjSpDmqAy4dWi2tGlX1SBFH1C1L8Q2UVBmESpo8dIVQzBhGiQoE6AoUvwYDcep7ceXMWRUSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85cc24dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"e068f12d365b086ed9eec57162a9200f","sha1":"096fcc63df16c27ab93e4d42170f80544f70ac22","sha256":"35e3a6b224b51e492958e170aa3df85c79a951a0ea40a366e2945d91d283328c","sha512":"b96ff0088edcc7c05f3455372d66ee5e63a0ac4a7783e5390cb1e9eaa4a3ce061bb79e11cd622e2216bb93cc0be0e74fc2e1e79f3b6ba42ba882759381985eed","ssdeep":"","tlshash":"1011b7e37f7835a7dcbe063b43d2796be6c6a7040e106dc0190755012cb800c47d6b87","first_seen":"2025-05-07T23:14:32.93388Z","last_seen":"2026-03-05T01:51:56.397833Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/michigan_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/michigan_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1914\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-77a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SeIWdNLBlEuOv9%2F3nUGWpP4EnjR0igfWy7Hzu5nilOCOFlejt7o7AoHpihSu1OHTb2hke0kT%2BrXlU%2BWSd%2FBWRfkiBICdXJAcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85dc26dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"667d91866376ce9cab50c7bb96f14c71","sha1":"3abffad46f50784234765b9b5a4da7635de7252f","sha256":"25aad0f49ab78ed7646766903beaf682ad3407dc26bcc1dc71da6426fbd30c6e","sha512":"02e214d104bc164b62d2ab7548955071458d056afed59b9ca00f4ffdd83a4b8c659ed9fca4d71a8f2fd23f390ab02fed2a69d3f915129b8fa147be1132d6b223","ssdeep":"","tlshash":"92411b3a0b5878f9f6de11723b9841b2bd12ac17163c0d4d12befa1c580b250d1b5219","first_seen":"2025-05-07T23:14:32.922628Z","last_seen":"2026-03-05T01:51:56.437492Z","times_seen":7,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/google-1.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/google-1.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMli3Ld29gckh55Ra07vkFCMw5sKq%2BEGu7I2Eyq9GIdw84YdqKbnni1u3g9ASEhb9fDYTWP03fnyd4OCqwnXOPi8gGhH4Nq3yg%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcf5-a34\"\r\ncf-ray: 9d4fbd85fc35dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2612,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dea92e3e6b9d29219b48535d610c8733","sha1":"5c9e0e51da35b816e44445bef88b1cfd26451743","sha256":"8f0b6cd306f8abdd57829cd0f915121b8f8f089fcb952988c98c2d48b79a2bd0","sha512":"25a795db5891ac047c10dfe472ca0eefe62e919660bf8db095236730f9e9c46461b3b2c011a92d25714aca59963acf9449460c2e2b1192430e0748fd4c8d686f","ssdeep":"","tlshash":"725172aa376d8ef1d20ca64ced17cdac3516d2f2194181b2c2b36b4f9e050d74ca8be4","first_seen":"2025-05-07T23:14:32.97124Z","last_seen":"2026-03-05T01:51:56.395142Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/3.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/3.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 78979\r\nlast-modified: Mon, 16 Feb 2026 11:17:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdc-13483\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHY56T6Lr3V78b%2FC%2FEzoi5OT%2Fn7XUx7%2B1%2FX97sy%2BCQE1OBX9jYhg%2BkV%2FUb38ZtoBgGwasTAdCSNTVJznWEAcR06EOo%2F%2FNOcdVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c4adcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 816 x 1056, 8-bit colormap, non-interlaced","md5":"cf1c87dfbe1fd102de76775062032f09","sha1":"94c0bbc55c797f9a31889404fd002eb767bcc794","sha256":"4703deff0b6fbb033c163e5e86622191eb84fba6e0de96dd65ca58229069ff07","sha512":"9affb04d467f0ebf5bfc4cb3da63447c4b64f93db7b3800810a211eb4fbc06a619d964e43e00c0ccf69e255facaa61bd4b161449eb50437739adcbdb30f04373","ssdeep":"1536:f4pj0Fe613flF2fLreq5mhZufBAL9CnY6hbj7ZHi84hrgpv:f4dQLf4QZufBqCDZ1i8qrsv","tlshash":"5e73123dc0fcbef87527af69c69d68368c4c1d544fa7c528451c6b6f084a08c59aaedc","first_seen":"2025-05-07T23:14:32.910948Z","last_seen":"2026-03-05T01:51:56.41548Z","times_seen":7,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/price-model-icons.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/price-model-icons.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/css/index.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11bPC%2BbxFOT7UA8FMFLLjp9TvKCCHjFsU%2BV40jGhib5dvaVcfvjX7vV4ayYYqGiG38G%2Btg1946kiGnYSfSZ3WMjyg%2B01zjKWjg%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:00 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fce8-37e2\"\r\ncf-ray: 9d4fbd862c50dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14306,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8342370d69d5f395c13d73fe22b5ff1","sha1":"c2c10ba3b86de3bd2e5eaa193183fb9318161f1a","sha256":"1efa3f4330431390a0c1c9b3d802ab949cdb71efd552c4b23481456e89cf2501","sha512":"dc6c4964e713e8c389549ba142b606c8856a02e133ecef32c385449c8bab650c2c744d621c2b6977af23734bb8f3a7b5d702e8337b376107d7917faf22b4cc19","ssdeep":"384:6vL9ONeqS/MKk2xrjfjxDOfjxrjfvxDOf5xhjfQxDOfK:+/8","tlshash":"b65284fd7578bc1c9d7a4256fb9a48a0136ed177f4404805dc0e2f2a78a28c6e93f6d8","first_seen":"2025-05-07T23:14:32.972363Z","last_seen":"2026-03-05T01:51:56.403952Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/clip-path.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/clip-path.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaRWFuuQWLgzWdNUVGd%2Byb0616v161tptmw2rRle%2FazaaAdAxCpV2wK1LxZCICW8koo2PMb97yo9pxC%2BdwtDQUzAhQUmsbcT%2Fw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcf5-cd4\"\r\ncf-ray: 9d4fbd85fc33dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3284,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a08a89f39c0897da345ee6149ae0e44a","sha1":"0f5c2b5071e3a786b17470db17daae8a02e5f0c4","sha256":"8efd221911a03047afb6d9bf104b987754ed67c4ee6ba9e953a85ca9c63cb92f","sha512":"bf6873509a467d6d2a6b2d18bf059dd42575b319bf30151be06017f9240589f9e21ff5178cf3e63bd22084dcf7a74196eb61545ea56597807e0f47ba4eeb2fbf","ssdeep":"","tlshash":"9b619a26a6bddc32e219d66cd9ad80a552a9d2ebb4c1c19082f0bf4f28244d35d1dfc6","first_seen":"2025-05-07T23:14:32.995321Z","last_seen":"2026-03-05T01:51:56.414026Z","times_seen":7,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/el-button.2e70eb9e.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/el-button.2e70eb9e.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rViBmXxqi%2FHqvvGYXxxveTvhhTMxhvlQsVsUOsG2M5YnkX1S6OZXKxNv3000UusDI0DXk25mWLAmcd2UtIsnAyLPsgkKI59ARg%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcd8-3d48\"\r\ncf-ray: 9d4fbd826b9adcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15688,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15687)","md5":"d270f521130ec50e4f012951684eff3f","sha1":"97ad1f00728cd6f50dc5e2e9ff21dd8cb24d8f99","sha256":"2e70eb9e37b9e94e6cac3c574790d53227b1fcb002c4ff7bbf548cab536539fb","sha512":"99ac0cd21f38da770b978a09c25e4727ced68a197fda26092206093ab6d4c6c67d175db5d7be283f02f725d816b03f99c1c679c0315921778355c516b8b749ad","ssdeep":"192:fDPDoQ92olQZDoVD8MD4B7su4XPfvDooGA4WuGCDsDhDsPENo3H48cm2pxDDVEES:NnaO58td2zb/CyVOdmMJ2E0q","tlshash":"9762f6dbe751eb3f1e139abc4b5af9a5b7419dc4c50077a2f204d08c20cb9a5269ad33","first_seen":"2024-05-15T06:07:58Z","last_seen":"2026-03-05T01:51:56.427842Z","times_seen":11,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://waxai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9d4fbd828d1e4c11-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 846905\r\nexpires: Thu, 18 Feb 2027 11:56:43 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h5JBcEaF6%2Fm5MqCv%2FWEMk2xPWokayEh4Bf8%2B65BBJA3WiEQTtExUyn3GBqQXKo94lSpPG%2FWmCLcmWLQ%2FJTRCkmV2hRdESZifpZmDoPlMfP9Ia6hD2eMujyxpPqQ2NCZiq9xwLjfU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-07T02:16:16.051013Z","times_seen":166067,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":25,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/arqcap.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/arqcap.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2654\r\nlast-modified: Mon, 16 Feb 2026 11:17:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdf-a5e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsMAdf0%2ByVTq%2F8ZdDgNBbNlzmG%2FBWnGbpMJPPryMx4AWAr0YyHdSAItpM8RtDYsGec0hfe%2FBWzwOQ24lUi4%2FdKTSrxrPh8VVZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec29dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"9c414aa74d739a2cb03dd59e04aae211","sha1":"777d986e48d4877aa8bd92a2b8b9b8fdefc7dc5f","sha256":"eaacf29c56e4ff13b85ac38375c7e02061066af0a4ff1d6eaf2ee7a946d5b6ae","sha512":"5e3297571cac133e45c91ec34d661dad8e449b759165a41079c636e0ffdad5df1fe2cea28ebe04ee6d969150e7b47a04c7ee6a9be2450da76766d5700eb20cd5","ssdeep":"","tlshash":"c95129c4dc28246bbb721d7ed09b4c48c613837d4162ea7c9917b02eb47b8216aef11b","first_seen":"2025-05-07T23:14:32.935033Z","last_seen":"2026-03-05T01:51:56.40818Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/media/hero-cover.mp4","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /media/hero-cover.mp4 HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1572864-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:44 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6607821\r\nlast-modified: Mon, 16 Feb 2026 11:18:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcfa-7cd3cd\"\r\nage: 0\r\ncontent-range: bytes 1572864-8180684/8180685\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgCsbTfBEKX2uVSed6Uzgehtt%2B42fgRKDyJZ%2F1BFukLCgnkhgkFdAf2xyIDRrAqgdyGmw%2Fd7qQZ%2FO5zSRoEfRrNy%2BaCQi8P2PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd89ccd7dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166155,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"b60837eea9051b1e878f984609113947","sha1":"1b12e07bbcc07ddd3a904a1bd4d8f10e81861ec7","sha256":"53fa0f8164a0f20768fe95fd6a2e10f04912dc1294e7894b610e5b5bd544fb92","sha512":"25136a9a227267109ec1f10923e157dcb30279b2d51b2a36bf8aa2267e45fe48442af94617151fad7aaa8d7887129fb7305a94ecc26fe5f4d2316e28044000bd","ssdeep":"3072:C8RFAPrSZ2CVnia4X0XVbYZV9x6GIVfaBDbYZMQeo4eu82UIyezRLu8RadacSx2i:C0APr82kXVby6GIaDbZQX6jMxC6acSx9","tlshash":"85f31261c94d84b3b2a1315c6c48161fceb953d98ffdc25a7d940fb51bb2fa4b14a6c0","first_seen":"2026-02-28T11:57:18.036939Z","last_seen":"2026-02-28T11:57:18.036939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/el-popper.70add633.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/el-popper.70add633.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdeTtSorsc8zNZobhRwnvFRsk9QeXnwghiBUJA3N83j8r2%2FfCqRBZVYxhI9oXohvuLI0j0NQaUJ42ejHS1NIYTXHLsFlS73o5Q%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcd8-8f0\"\r\ncf-ray: 9d4fbd826b99dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2288,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2287)","md5":"40187616b07497df5a5d79582b1cf2e8","sha1":"de95a70435b90b277001bf3a0cedc35797637cfe","sha256":"70add6337f499bcd5b47059ceada9efe7cc2333f18e8addd7a120c86ea8a02ce","sha512":"c8a1299aa68f29bc52776a081501f41346eccd79095460d0195c8368c5c78cb6cf00ed2bc5108e0eb1c909d5d189bf0f9423ffa16c22c0a92fa3e5b7de33b7d9","ssdeep":"","tlshash":"e2413b95f36ef0bc6d13df1ae9c49ab4f91f7760b2021a02f5c9513010b39e6a824c78","first_seen":"2025-05-07T23:14:32.928483Z","last_seen":"2026-03-05T01:51:56.392372Z","times_seen":7,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Draw.jpg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Draw.jpg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 309192\r\nlast-modified: Mon, 16 Feb 2026 11:17:53 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce1-4b7c8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D90js%2BA%2BO2CmjFe%2FwJLrin2mbx0e3LjFVQnwXhxF8usWxVQMb3tC24PFNuMtbaktyIm1kP3TU9zk1cO5xsyWT0x%2FxNXRRWodMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd826ba4dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 2160x1500, components 3","md5":"c17a040af430ec92e282be042f75c99d","sha1":"b7cce9db3e154a5b0f298e09669ecdfb826f7299","sha256":"0bcd791d72904b9fd132af1d43cd24125a9fad13a96b961bc537c02a7d8571da","sha512":"020dc26bee14669c54daacccdf915d3015f1d949be856dd9fa31eed552cf2b73a5a5d028f2c9e26d832659f2da0f1b3a6c4e0d1d5fbb02dc277c45a6d0f3d7bd","ssdeep":"6144:jcBhCz7g3bEe6GWqzRfxyrdEgw/1V5X3O+gm7FCezA2tC4UqjbBk:J7sEe6GWoRpyrdEgw/1V5HLsezoue","tlshash":"c36412899d973feed477a9b190a2f1e00b61a1b0e3e281d41b545f8039746b3ef8c749","first_seen":"2025-05-07T23:14:32.975713Z","last_seen":"2026-03-05T01:51:56.413535Z","times_seen":7,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/default.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/default.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNft2vSWYOIg4ojEj3lcR157r7i0UmZD7ene2GpXkMMuFSi9lJLduADlv2QHVNBW%2FU6%2FoYeh4zPBk8NGnV9KYk4YEGwQgeXoiw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:52 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fce0-3ec\"\r\ncf-ray: 9d4fbd862c54dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bfc0171598d369214e5b1983d6f71ac","sha1":"d47238179d03cab1563c2e1a4c95acc55515c818","sha256":"a1d38db41c645787bb2cbe3d2f714374b9abfa7254ed5833ef6f7a696698418d","sha512":"65ec56295ddaacc17e1bfdd06c162ab21e1d4b41e22496fe62527fc0fd46ad37166f0cfe341e8646cdb89bae7a9183e0dbb95e06d1d7c9bf3d3a15951b97c539","ssdeep":"","tlshash":"8311c278d35c452dda0857306aaf64d4187d33c46e49c484f3c038babb25def142c294","first_seen":"2025-05-07T23:14:32.918297Z","last_seen":"2026-03-05T01:51:56.434215Z","times_seen":7,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kalam/v18/YA9dr0Wd4kDdMthROCc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/kalam/v18/YA9dr0Wd4kDdMthROCc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://waxai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22336\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 07:33:24 GMT\r\nexpires: Wed, 24 Feb 2027 07:33:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361400\r\nlast-modified: Wed, 10 Sep 2025 16:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22336, version 1.0","md5":"0a6a7f663878d4436b8996e7cc0fe160","sha1":"a0b26053cd9cb515dafc8c6e20715d991189f8ab","sha256":"954410601a823f37e219f7930b7446f86afa15621326a7078d56fb9c910135cb","sha512":"d599a886ee0b3d7265c72e829f17efdabe6b0a476a0ff12da794e27548c2f397127e4956e4225e9333915471752db0974e04384d5b4cb228ac4ba3c29820fb4e","ssdeep":"384:A2+FY9nGQK22/bS9xer31E+A+OXp84ir3D8Rj+Waple9tjQBgB2skqAFwNOoH6D:1+O9GL2CSHG1hAhZy3g1Mpk93BtswNX8","tlshash":"31a2e173cb7d2a1fbf9d5a286a464f3359b23e5047128ccaca96518644cd84e7b1fe08","first_seen":"2023-04-10T11:34:36Z","last_seen":"2026-06-06T22:45:07.070611Z","times_seen":543,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":132,"dns":1,"connect":27,"send":0,"wait":19,"receive":1,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/amazon.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/amazon.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1403\r\nlast-modified: Mon, 16 Feb 2026 11:17:50 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcde-57b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdUXJFJoIjLhhroQw%2BZ4QnvWDS7qJssjbbNE466XM9Iepe5QD1Bc2r0JQfRglJsd4nJICF%2FCJD12EQWwhWrECnQLbBmdW8CY6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd858c0bdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"1a7558373f897150e77d1ecc22b5c913","sha1":"7f41546270e2927848d9ede4548df8137152bf1c","sha256":"791056be32f9f2e816b987a9c6383cbe33ba79188fea8a5caa11bb3ccc4484b5","sha512":"9e4070a52e6b1cab47a6041eeff60fb4e6a09d945324c55910b0a732f4f0a77de26465192645b78906f97c7fb4d9f92bc8803a3728090d0dcfa1fa502a98d10a","ssdeep":"","tlshash":"fd21cb9db744c538c3bd917f4f4d44c1e608459e6f2a46dbc0dc99371c8e52391b9449","first_seen":"2025-05-07T23:14:32.976728Z","last_seen":"2026-03-05T01:51:56.41089Z","times_seen":7,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/shopify_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/shopify_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1959\r\nlast-modified: Mon, 16 Feb 2026 11:18:01 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce9-7a7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtR77svvSOf2B%2Bhz0K1wVK7xIcwXq0m%2FdZJkKFeHheUnArOSDxYxSQxhIDT2rJvsQSO7kV8FF36mF2aM7MdL0%2FqHkn%2FlZTCAzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85bc19dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"fb0f9e3cd7cae9bd5e70ea126d96cb33","sha1":"f77b09e7ca92e928bec5664bc238cab63ae9559e","sha256":"64356e4865118200518a272775a096278d9e7ca83e0473320f5180bb045662f7","sha512":"9201a132dee5c15a7c12d08ec681a4e077912f1f89de1c57897cdab84450f30b2c960d3b9043fccbda54949e173cd2bac1655807a22e973840533ef583662c17","ssdeep":"","tlshash":"3241e84497c20437ccb666b4deb2e3330bb8e9a109c3189f10aa561db49a6b0278d29c","first_seen":"2025-05-07T23:14:32.904571Z","last_seen":"2026-03-05T01:51:56.422103Z","times_seen":7,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/michigan.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/michigan.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2106\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-83a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2B3HodOgf9FmXLCeFBZ8a53i8yaCYYKgzOKNKCBNinfraw8SFm10Ap833HA59PlKvqKRq3aP7FJ8SZv1hLEBb7qE2z2o9aDAig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85dc28dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"ac0c0149e3424f51240f10f4b226d5d9","sha1":"10c57b270ea412b8a0f234417d543d09eacd11c6","sha256":"a714447df66affb8fe427161ee0f5e37e4ba0718f1682a1b1854bbfef8541a34","sha512":"3e2d3a88c2f30efad18657a11f825958842962a33fa052aa5311639ac2f86f17e946703839faa5b012e130c26fbefe2b207163b030ceaf804268dec62175f0b3","ssdeep":"","tlshash":"d941e716f74181aad186281e0268f35740f1de4e8a86e0e74bbb87e2367821604b18c4","first_seen":"2025-05-07T23:14:32.906964Z","last_seen":"2026-03-05T01:51:56.432351Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1093,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/keyman_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/keyman_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2389\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-955\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyHLBnTocNeWg2kgTw6nEYltUEE3o%2FEiMA0on%2FBZ87y5HqtEEOee6H21If5dV4hgKkC05BzDteE5AQnmSgccoZ5y4TTjrXYorg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec2ddcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"c6a2497f9d5395fab49ba5903746f768","sha1":"8eab7d010e8449a1c21cd699633b2166219a7a63","sha256":"51175f39f51bad238284172042297ff45e27c22dfc5dea2fa8efa1b2093e9f16","sha512":"4dea3ecd18138501a966bb3b50983a16e2a3a29c8829671a71993d6b1da8ddb88c3298a981a4b35d21599cb6988ab974e1bf7ea59f0bce6c9afe30afc408da5a","ssdeep":"","tlshash":"f741f9fa13e30a46366a2d18bb1fa01125cc15e2870b467397baf9c8956d3f705857e2","first_seen":"2025-05-07T23:14:32.969057Z","last_seen":"2026-03-05T01:51:56.423155Z","times_seen":7,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/jira.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/jira.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GF9eAcS0O8t7%2BMmP9lESVPyQzhG2PFkBiYHr0P10LEoJsMXq0oIMlJgPPf9omYMBVliO4HYbgnJIFZZbhI81iLTA4ZPROe061g%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcf5-6d6\"\r\ncf-ray: 9d4fbd85fc3adcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba45d5312bd9a3dca56112573a297561","sha1":"38e32caac5629f61fd30e1808a1ee8e4cc2bf811","sha256":"02b6131bfa401768aa8715376b0c85d3339a94b4e09fb3001094f23b6846689b","sha512":"149c49c9a356c13cce324ffc11ceaf846f4a6aa7e3293ed979cd6ba47c4eee78d81131f45d2fce70fab6859686724300d7cc29c073ecb8d8dc6176f10109b5e7","ssdeep":"","tlshash":"99312121692d913fe2a0df28f60ab024269f94f5a682c514c2c8ae1a581d4d39d2ebd3","first_seen":"2025-05-07T23:14:32.965622Z","last_seen":"2026-03-05T01:51:56.431221Z","times_seen":7,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/google.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/google.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1356\r\nlast-modified: Mon, 16 Feb 2026 11:17:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce3-54c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxeyOGWyAeml5nc47z4FhWRgOqltI%2B6JgHZE%2By6%2ByO14cb4Vg0jar1c89nesmhyu%2FZI2a%2BzclirBPGFH0bDbEhMDXWT0bTAs6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd857c04dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"914513e8046ad0ff376534403aee394c","sha1":"ca985cfe2cf8bc89be283cadbeccfb006ec8e9a2","sha256":"b622e4cd016d7ddc3828e039d2a42c4fea3f106f534bc5a53dcaabf8fcbae8d8","sha512":"9018b431888004de2176e10255b0f791908f770acd1353479b47eb5c7386b7aca46f50d95f5db0e6c043c001b9b6eb3b74813f31b3d35d7f79d9b5b6014cf0b7","ssdeep":"","tlshash":"e321c8bed4152b74c3533436ff9483d364e47a7c28e268935213d2d0dc503a84ad5a42","first_seen":"2025-05-07T23:14:32.983008Z","last_seen":"2026-03-05T01:51:56.435531Z","times_seen":7,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/mailchimp.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/mailchimp.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xey2FDoGL1tM%2BZhA3J1GJOq903%2BGIrAyORpfHqMQU7M%2FZ1wnL00VqKN4i3IwubYjv1JjQxh23OHDrWW6TVowLlZc2Xu7rmQ6bA%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcf5-1a72\"\r\ncf-ray: 9d4fbd860c3edcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"439ca2f8bc0e14ad7abcd69296791682","sha1":"c1e0f5abb910fdf1396dd4d0d50e66a7195b4832","sha256":"335a23eef129bef8bc9492d601027039395154bdbff4b90ad8cd4174526ef67a","sha512":"ccf87504caff54706ba7ee6c318fc78e485a2cb5ac111969ce1d026d5730d7cc12d7948551b074a433f2ccfe654576ce91b0a1e69848e810c78426d4de90a82e","ssdeep":"192:5DfBOEe9SDqwytXyb9Is2AcvDkkbmZuA7gyGcPGo:3ZesaS2AcvDfiZu+xGcx","tlshash":"13d1b6d0277182fcf545bbbe9622b4617e8324f67b628494c7b22d42e50504c6eeece7","first_seen":"2025-05-07T23:14:32.947864Z","last_seen":"2026-03-05T01:51:56.440836Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/nuxt-icon.2f1fba64.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/nuxt-icon.2f1fba64.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SWe%2FVxJObrhlxPCOZ%2F0lTQOYtsImiQuUDaVBw1dJ9CBgqqWT%2BQ5N3Q840gcFwLs%2FbvglwKk7BG7ky7Vi0NTpBx%2F1L%2B0CrZehw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcda-a4\"\r\ncf-ray: 9d4fbd826b97dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3a8741cfc68182b7c9d6546f7ecd2772","sha1":"b160c14194a6bc7076fd9b3bd03f1c4060c4ae9d","sha256":"2f1fba64f0540883d1e4bb2afd88b34bc4dd37c894ad6dcc35b10aab3a5b717d","sha512":"ba0a815d1c3f49a9f40fc6cbbe31c442709878ea42a0f3061d139d3be82916bbfa045475c5b3191f3bb4982d8ad4be0cfcd23581e97a8e073dfc434691c3273c","ssdeep":"","tlshash":"83c08c2d3360442e8309898a3780a825b93736e0cdfc184237421d3402300ef749c13f","first_seen":"2024-07-05T11:41:44Z","last_seen":"2026-05-25T07:34:59.537894Z","times_seen":16,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/overview-slogan-banner.37c3ec27.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/overview-slogan-banner.37c3ec27.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYWMb15l6PYLssDjbcFWJvtQh9cpURaxruqHP2qzUyP%2FsqEqogA3Md2h5EJQ7q4jGIrcokFtLuJq9azLho5omewcfrCDwaYxfw%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6992fcda-35e\"\r\ncf-ray: 9d4fbd826b9ddcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (861)","md5":"753f696c13c9a770d4d2b6fa51aff071","sha1":"e84815a06882891e8fe686f050bdc80396a25aa7","sha256":"37c3ec27f8b2a161bae3827e2c2c70cf1ce9a6f5ec0d4f982a236d3ec2c79e93","sha512":"cbc8fce2559eb6765430d56bc7dd51df3c386b9900d9cfd40ab3610ef70d283bb13ea043d0a1010f1047831c739a22a22616b4edd168ac2cff65c6d0a16afd3b","ssdeep":"","tlshash":"1211ef9abe569a3d061fc54980b222cef224382ae3cf669fad4240595dae3d03732195","first_seen":"2025-05-07T23:14:32.963441Z","last_seen":"2026-03-05T01:51:56.429187Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/js/app.js","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onFTXflKHPyz%2FsLXVDqlo%2FxZPEwuwjhQ8xv0ChLRspBgTFYw3XVvdrQV9KvlGXsA92M6fqrqwWl7yVVTftJOoqiHJmLv0iUjAg%3D%3D\"}]}\r\nlast-modified: Wed, 25 Feb 2026 11:22:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"699edb7c-49e9\"\r\ncf-ray: 9d4fbd827ba6dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18921,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18898), with no line terminators","md5":"1c3b582bfd7bf324464952bcf18673e9","sha1":"5884c3938d3911c9d03ed4ceca884792a2ebbfda","sha256":"2858b5d108eeb6f1e909b83c26960ff2524e72a3b9ea37163037bb7539d5fdd3","sha512":"2d20ad814da6884e5386cb4e568fd63ad44fd8247850dbb9a96b46e24ea865f99373a3555883eb7f9b8f1e7eb1ca910dd16fede7fcb18e2aeffe9d8c1770d508","ssdeep":"384:c+kl5rtb+BVRl3KhRS4OwVUzmqmT4PQ1cMM3oJUwmYktsTOWY0X5tGj3QBKJP69I:c+kYBVRJcS4zVUzGT2ecMM3oJUwmYktV","tlshash":"1a8274e43e89b45e238f6ef73b3ffc4ad01d6898644845dbe545a80d68a472ecbe5034","first_seen":"2026-02-28T11:57:18.081192Z","last_seen":"2026-03-05T01:51:56.393253Z","times_seen":4,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/naucmeit.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/naucmeit.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1636\r\nlast-modified: Mon, 16 Feb 2026 11:17:58 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce6-664\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJVK1VdmmymOr1hNTIZ6EVtrKCCwXTT%2B6wVCowHxSKg4fPSUc4ehseATPKvwbcFZC9ZqatXwlzHKcSXojchFxaqwhaGwOvmzzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec2bdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"7413e2e28faf53b309310554dbc9a37d","sha1":"0bf40d9b5f8c787eeccd174a0c8ad554f88d4ccc","sha256":"82308288b7bdc6a6e0d2ac395065b2f5c5aa19db55d6e5c9e0efd33654189f95","sha512":"98e1eef5ae9878a8eea8c2cb8494fe250379b3c5a1eee8c89a24385d054181c034323dae1e90cdee2590f2f00d5dae1e234ff8de082aaadb85e689593415e515","ssdeep":"","tlshash":"54310af396520059f9333ffaa50907368eae0c6f076ec15b282a47d138f62c4157b091","first_seen":"2025-05-07T23:14:32.936076Z","last_seen":"2026-03-05T01:51:56.405034Z","times_seen":7,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/naucmeit_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/naucmeit_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1636\r\nlast-modified: Mon, 16 Feb 2026 11:17:58 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce6-664\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Z0B9zcuSYKJn75t%2BUUjFDke%2Fwrk5YMiiPoyZsl36o%2F3iXDjF%2BzhzA7jDA9cQQA2syRs8YyCuxIMFdJk%2F6KVCOvHhKZEGXOJmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ec2cdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"7413e2e28faf53b309310554dbc9a37d","sha1":"0bf40d9b5f8c787eeccd174a0c8ad554f88d4ccc","sha256":"82308288b7bdc6a6e0d2ac395065b2f5c5aa19db55d6e5c9e0efd33654189f95","sha512":"98e1eef5ae9878a8eea8c2cb8494fe250379b3c5a1eee8c89a24385d054181c034323dae1e90cdee2590f2f00d5dae1e234ff8de082aaadb85e689593415e515","ssdeep":"","tlshash":"54310af396520059f9333ffaa50907368eae0c6f076ec15b282a47d138f62c4157b091","first_seen":"2025-05-07T23:14:32.936076Z","last_seen":"2026-03-05T01:51:56.405034Z","times_seen":7,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/google-3.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/google-3.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRUrVdP%2BMEVjH%2Fcyesm%2FCKw4HBNErNru4zt9%2FDh8no%2BYtNKxfsRWPzqKme%2FvHtSjYz%2BmkhzW1zPwE49KIo9MVwho4lcopn4z9g%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcf5-399\"\r\ncf-ray: 9d4fbd85fc38dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"635fcb681efa2f61d08a778840391d99","sha1":"4e9a9151f8b6244e5b05f3697a39bac8a34c8f54","sha256":"88066172de5e8d90b1d3b993c67c47e6dc415c40808e05b902238049ca924076","sha512":"f89d9c89f4cb31501b2c6f603bf4a04ea52233214ef1d7f6cb92efaf412d7cc34f7161d867c8ed556ececb9e2100ccfbe8fd4c15a57e6634b97d481f4cad1209","ssdeep":"","tlshash":"521104a4728ca9674e04ae11957fe49e1038b8fe6d758044eeb0f3665a155328c19dcf","first_seen":"2025-05-07T23:14:32.94664Z","last_seen":"2026-03-05T01:51:56.414753Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/miro.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/miro.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNY7I7oemeJfkycnjsvJvoUFyPLw27RLPtPZMJnce%2FEyTgtL4S282yeDPYopeVmb60jpDsDxujv0HvarLgxq95YibJoBH2%2BQkQ%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcf5-359\"\r\ncf-ray: 9d4fbd860c40dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbd146dec6f127d4229787169f42b9d2","sha1":"79cb6b8df651030014b5c917c486a27ff9c229a8","sha256":"4fb9bb146f8b029f05ea16f6507b28be9099ce2c8c989f39229e9522242814ac","sha512":"5228a05207779c2c97e282cda72a3cc377e2735576bd45bad5b489b7d77939cc353f080f838d10bbeeb6e6f79bd586a68e28bd8db97d6ebd8ecf2722ae4f2110","ssdeep":"","tlshash":"38111284a1d843dc99421bb8294eb8d0d43e70fd72fc6abcd6f51720773499d92283c6","first_seen":"2025-05-07T23:14:33.00044Z","last_seen":"2026-03-05T01:51:56.401237Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/4.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/4.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 48082\r\nlast-modified: Mon, 16 Feb 2026 11:17:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdc-bbd2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cCVtOLtumMD1sWLzmrtm0FvXpCbEib74xic9qSf4moArd%2F25LDPT8idQgiTGoOy6df1lzWTjkEWG8tT4kH1NSpFD0sU%2BzlHAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c4bdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 816 x 1056, 8-bit colormap, non-interlaced","md5":"695684d62e26fa966358211484778771","sha1":"19b44ae93b6f375e4afc58e614aa63bbc7b35e7b","sha256":"f585c37cf15ed94fe7eac2680d7a854808b03e9d236ed65721cf22e8efa09d78","sha512":"75d1acd3e21ea2633df1296e7f8128293587778203ec49e87469c9ce154c4af303ae5f64e544c6541242a0ad30f572aad5b64663882a02e2133ac2c97250bad4","ssdeep":"768:IGxQtZTQefW9GrCKGbjhPebEkwBvMDgHZeqo2FIX2KOWLsL1EgLhfU/:IiQzTQ191KGPhPEEkICgMaFovMnM","tlshash":"cc2302b79c8641d8309e7f0d5c36216900e6a1e64e615611fd78fd932cbbe0aa3e3477","first_seen":"2025-05-07T23:14:32.962499Z","last_seen":"2026-03-05T01:51:56.403387Z","times_seen":7,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Feb 2026 11:56:43 GMT\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7b85249529537edc6a173f2554adfec0","sha1":"fe39a459f44004186752d386ad985b21f8870fd8","sha256":"c9c9fb3bd04efad9987ea96ef7cf67e30f3115e45c94f50f0def82ded168a865","sha512":"58dc81380cbcbae8b9d1c533738f80f8136ee6f2ebb650678ccc6d8de630e69e733505da45b59d5039d23b1cf4cee275ae683d6fcaec07fd6614df744e82b7b1","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGfNx0NO3kCxHYNCbOO3Lxxgx:vXuM1+g7GQK","tlshash":"79427892002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-10-22T22:42:57.223015Z","last_seen":"2026-05-30T14:12:23.536903Z","times_seen":48,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/microsoft.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/microsoft.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1197\r\nlast-modified: Mon, 16 Feb 2026 11:17:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce5-4ad\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCJ3T5vNoJSxjtTyfRXKDo%2BlTGyJjq2yNe9Z54E3Auko7VG8IjPhdPH6nZeYuWa8aQwzCaE54LvgHcNjwOU9fx5pmJTHzvDkCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd857c07dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"97e22d37140b2d5c28d2da0c3e76321c","sha1":"c5f8334dfdbdc5729431c47a5b3933e6ec525cd2","sha256":"16afcd5498e97f9667f9df98903c422841a543c5de36467e1e51ee8a775781d3","sha512":"d7fd87db5853ed89836b3a20ee892436f245820c6244cdf3a170cb3c1fceb6025eea77332e449048776b109387496e55d53c3c9cc576ba443c23f11231b63948","ssdeep":"","tlshash":"d221ca6e0377f020f1121d7d6c1b838c9254bc872b5152bf4b0375369f6460e3215997","first_seen":"2025-05-07T23:14:32.913147Z","last_seen":"2026-03-05T01:51:56.410063Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/ibm_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/ibm_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 677\r\nlast-modified: Mon, 16 Feb 2026 11:17:55 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce3-2a5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hob%2Ff4m2yIpMeXletLP7D9LFkSG8gztfbASl25GAffjJ4lqIvY5fKzk5gu4ByQr5oY0XTgMAPFd7xVKv3MbeZstf2cKUULBOGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85ac12dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"0a73cea9eb97f1062814489fcb0cfd4a","sha1":"109b309838fe5cbc5530be699c375f63c66c72ab","sha256":"232a7110cecf32b80cfc5828d912c0c456a9952710fa534f2c805e02aa21367b","sha512":"9daa121569024bf235de2ae7ffc7e9d44903145ab4d2b8a6df9c4d8a887f4793687e1e08e39bf7f046064667bc45ef6e140dbd30eeda119baecaaad8326cc17d","ssdeep":"","tlshash":"5101836212b3d4bad68f6df4c78c1228c8ed80257fc1c86f615084728c31d2545f0207","first_seen":"2025-05-07T23:14:32.992376Z","last_seen":"2026-03-05T01:51:56.400268Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/overview/goodbye-logos/google-2.svg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /overview/goodbye-logos/google-2.svg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwbOatlGyFwg7F4u%2Bsyk4xCAcCHQUyT6k4OvZXZF9WuMCMOBX5tLM2Ym9hnDRcZDq2q%2FeCq96wRgirjX7lKVgETA83sHI7MSxQ%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:18:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcf5-25f\"\r\ncf-ray: 9d4fbd85fc37dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a460b591f16ee5534fbdb1872b76c29b","sha1":"8124566da371c45699b35736367d72bcf05feadf","sha256":"c3b54987e5c7e0fb137fde66cfcac8d1ccd378b3445d941915e90d91c5fab795","sha512":"873167c39efda19d0390d5cbaa93a4bfd2ab648b6831c10118d61d651890e01a471c73d6cc799a928b5d78d3bb23a97180d8a41671847a43c56e87f36fc3c986","ssdeep":"","tlshash":"81f0a2c53058c1fac6101b15577ff53dc9345aec510e8495719457211d1c6af0df5bc4","first_seen":"2025-05-07T23:14:32.999074Z","last_seen":"2026-03-05T01:51:56.406026Z","times_seen":7,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%202.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%202.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 14419\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-3853\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yynZvGFRWFQF7EMQ2d9CIt22CnRxouyjub9EXBQLFpsuKnodqTRxBrLqItLuXkeAvJ3SD99c0IbtAnCCyGt6DYSKAVxyPGEAjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd863c58dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"209ec79052660bee53356f98684acd2c","sha1":"b988d85e22b1c294068181b947198eb9196a6733","sha256":"86c9ad26f90ae399d2d6c009b8f80e389d2ae230d26c000f61213d4a3a9a0dc2","sha512":"1d2ca7fad92d05bfbbd19128fb801d1b9dc42d3acb6bbbb3253ae79c3383054715d6ebcd92222fd0692b6d0e88cb6f7281c8163364e0516815e0316ae13c9f1a","ssdeep":"192:WSf4ToUmoQ4DkqV7+1buwwEDSkKafxKpyEjxicYaYOgrFdMfAtonrxyp3jWMUz:5eoUmoPBFEWa6McYacodyp3yp","tlshash":"1352d12b74dc9067d640c85bfa2e6b693160682da118cac676d82cb1277ef1dd58f3c3","first_seen":"2025-05-07T23:14:32.973515Z","last_seen":"2026-03-05T01:51:56.395619Z","times_seen":7,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%201.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%201.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 23609\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-5c39\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2JfJAZws%2FGQHxhmP5UDGDzrgxkBxmP9qHXm1%2FF2AcE%2BmKxcTyQr8tJ7qSFkg43l%2BHBHJZpsJaZWt2HspCCxtpiU9xl5K0e%2FjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd863c59dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"6fcfb75b4c6328ffbb42c17f191ace34","sha1":"8202dc9a363cef93ddd47b0c50dae7b5a7301348","sha256":"a305a87b43bb1bec19584bb6b83d85030298114a9cb585017909798c92a631f0","sha512":"95fd94913f2e42ff090a6998afc0f086942f2fb6e4d95c4c7df99f0f8bdd13e1edd554b96929a3466b503e94de874a0120aaa732576a4bbc6f55c2fa880a93df","ssdeep":"384:+bFoYDraKWqcULaaXxr7noFuOJ2hiQ1zZKpXJoidb8toDE4:+bFnaKxD+WMceEZKRJoiB8sE4","tlshash":"59b2e1fe7b9d4e8c186b02ec98f3a8d48dd4f6272e52c4699ff5c1b2544e294640cad2","first_seen":"2025-05-07T23:14:32.955656Z","last_seen":"2026-03-05T01:51:56.407352Z","times_seen":7,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%205.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%205.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3160\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-c58\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50Fh1I7B7OQtLLYOgeYJnD3SkqjncRdC9NyeTpO0tIyiaipLTu%2F86vQIFt9r82qlUuTpRoGog4SIjCyKveQPrJedq6VtBuCxUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd864c5cdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"ac5f213737d887482a4f16a6ac80d4c7","sha1":"1af4dc1ed55b2439f39f19c70bf735c3843073ab","sha256":"7d6f710f080c035d96a964a49672bc9fedbe81659dc5d00a9af7fa86975e8d5b","sha512":"fbf4766af3865e76d009e29bd784873246a703068160ab204040e535e18fb0d89e8042ccbd10c26dacca9d3b80709da18e0f6d92fa98beb65464981dffeb927f","ssdeep":"","tlshash":"a1517cff51ee8e48bf13495c5b93a0c3df004d7a088752815c0318eb11ed9a888ea2ee","first_seen":"2025-05-07T23:14:32.938909Z","last_seen":"2026-03-05T01:51:56.409484Z","times_seen":7,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/favicon-96.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:44.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/favicon-96.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2542\r\nlast-modified: Mon, 16 Feb 2026 11:17:53 GMT\r\npriority: u=6,i=?0\r\netag: \"6992fce1-9ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 844238\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0D1gF01%2F%2FOyHFCJjMMgMT51BLNmP11qRmZ4B2z5ACAnqQ%2Fz958LKH4sMFoVRbik%2FzV%2BjROo3A9fV7EVJDnjcn6tfqx4qYwCO2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd8a9ce8dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"7e4fd2170e68ac1a67e068e46ad35a93","sha1":"a2a5f90c1c60d8067e7020b43d71f3cf0890b3a4","sha256":"169d5f01999ad0192555dfd8ed4ad6c884e79dedf58394488514161000e6acb7","sha512":"93e9cb0beb20546a152fdb3c36f83a27f42c1f2f18e48021a96ce909784e5d14b351815b04fe6408f769e6b7e8a6d9a32a70556d49db70982a90bbaa1c0bdc53","ssdeep":"","tlshash":"41517d12c9835187a7cb2953d7f3d78228eb723650ff4b58c8d8a0d287f547c6808aad","first_seen":"2024-08-19T18:00:11.663466Z","last_seen":"2026-03-05T01:51:56.427312Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/tiktok_1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/tiktok_1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1908\r\nlast-modified: Mon, 16 Feb 2026 11:18:03 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fceb-774\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAUDmSTNPo3L6tQnmw%2BzCVdOZ8UqiIaIDBXaLbeX2Pl3SBgW7SaTM5xbKZ7UFORfjH8rDb0Oex3HBnXpqEx1N5x%2FhRTNeAyjeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85bc17dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"182f185de9f8f853a213916157524cb3","sha1":"13781bb0be51dfc883c02bf9338e79d8306f794c","sha256":"59382ee3503ec900b3af6b43ec93ddf3185cc0d5725a9ceaddcdcb8e3ce9ad04","sha512":"df1e14f9e068e369507a41aa38eb9b251d1e422c2e4851b18cb974d4d855ecb4c2e0b7fdc51b9aa9fa51c94afb61de2be49cddca1e80b6fbff065ccb18805390","ssdeep":"","tlshash":"07411bc8de27ad3ce473da7c960f082b94403b0e1add25247cdb5c11573ac04ad6569a","first_seen":"2025-05-07T23:14:32.917288Z","last_seen":"2026-03-05T01:51:56.411403Z","times_seen":7,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/1.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/1.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 247816\r\nlast-modified: Mon, 16 Feb 2026 11:17:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fcdb-3c808\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkLOzx8Eb7mFimwtSun2EjRiV%2FNyUhvkOmM41DPCh%2FpR6OUV58sK7OzR9Xc6OdxTaMjO%2FZHgTDvUPNKS8Rj1EYV7TuhAtPtKxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd861c48dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 816 x 1056, 8-bit/color RGBA, non-interlaced","md5":"fcd477ae230f6f1a6a95c2d70cfded63","sha1":"dee9fdfad45ad141e9be92342d075cd814dde664","sha256":"66ce0b7a6b5aa1717027dbb96d2c7021005f6be097a8d3599daa0254b19c3f2e","sha512":"84cd10a84e4136539d9102ab65f05378a5f144d6d97dba2857fda9dab352a5ba2f511913e93385147dec0a420cbc3d939a922f7f5eec59b041e4a68ec2f5d12c","ssdeep":"6144:ApNM1ZXApHOLZF6w7dw1WilkQi51zrkvuNq8TWdbi9oPC:ApYhD7d8LlU5hkGNubAoPC","tlshash":"c83413f14a3be6ba8e16d49651844eb3f28f148b84d017b89d37d2c70f82ea4d58d61f","first_seen":"2026-02-28T11:57:18.138072Z","last_seen":"2026-03-05T01:51:56.441941Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%203.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%203.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 6624\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-19e0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkMNBFwcUbldGd44Ken%2BVFr%2FnNQrpuUcUqYPMBcA1MUixqwXFkKQpo1Pc%2B3mQP2hXPJNs0TzPh96E3zSKwm%2FeqoVE5w4pfrGVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd862c52dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"6ce251f483fa158e4c3b0deef088670e","sha1":"a630abdb19525dc04d34283dcd070f7f78728b48","sha256":"60517bcb88dafbded7d838e381b226729a1124c0234f4ee5ac4f94c1c42fb232","sha512":"12fd60bcda7af1cec70fdaf97b146f1b5fa1e2befacf7af1a9c59cd5d74b8b41c380b236690015c91aad75cc6893783de2c1b7aff9ee2b40a958f3337702485a","ssdeep":"192:rjQU3DkuhvDFaQG3Rpa5QqkeW38ZBRzDTj9vE4tUc/I:LzkuhofEQqJM8RLZtM","tlshash":"55d1af86702dbfc47ae4753c965385f0225b672f4eeafb48be439cf5711140b9c90a4a","first_seen":"2025-05-07T23:14:32.987445Z","last_seen":"2026-03-05T01:51:56.391845Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Frame%206.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Frame%206.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 9915\r\nlast-modified: Mon, 16 Feb 2026 11:17:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce2-26bb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BoqxCGVmco0FLn8DLPjnuhu07lrxnsxGR3nANTzg0gnEpncuVJxQ1uEvpCffpTjxHkapUbeUD4bJfFgm2YkEF6zZRYOzcbgyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd863c5adcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"293c132bc3f5e1880cd6384e0d1a4092","sha1":"5c157e302b82855a8e88742b35b17d43e5357a4d","sha256":"1361206aec140cab0fbc33ccdc2dfc3604fc82651e00e4f15df46f22702fdd84","sha512":"98a4093ef70c592a5817aeff59a4b4ad7b2c3a7cf9e07a9ffb42f56345913eb6cc32ebfa447e27e9143cba34fae67fa997e0d078b2584f43db23e8e7fa711cd3","ssdeep":"192:hHcir3JwqtpXUh0wPu1UsO8fhxVMH3g0V:Kir3tvXRT6sTMV","tlshash":"7612afcead278d20976cb83fc962d79d6c295247481010d47892cc8e3cc5f79356b052","first_seen":"2025-05-07T23:14:32.979048Z","last_seen":"2026-03-05T01:51:56.434922Z","times_seen":7,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/css/video-play-when-visible.4332f285.css","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /css/video-play-when-visible.4332f285.css HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BujUiqSx85DEMidpOmRB%2F2i9ZlX1Qlp3Wa1t4%2BXnxRLh7MdrhZAhKVaQoB9jKcjaBPacxaH2r3PwDM8p%2Fi4Pi%2FUOdKNUJppgiA%3D%3D\"}]}\r\nlast-modified: Mon, 16 Feb 2026 11:17:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6992fcda-43\"\r\ncf-ray: 9d4fbd826b9cdcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"883d7083d2ce6cb0450edfb72e3cf017","sha1":"b18d153d64ac3026d79e8b810a1cecce4d4d4312","sha256":"4332f2855fa1d1cfb0735784f5934c78e2a89a5450333457dfdab4e11e8d5a56","sha512":"a366807ee151994e9fb5c77531e0e2eb5982775cb23548f4d494479131b43b033ad1134abbc35cb49110242dfe62734ca0ed0a4b7b79783d7633f61262b82b44","ssdeep":"","tlshash":"38a00232251ed3345c1558d2612ac8c6b3cee028df8625396fa6f8a4d204447fc60152","first_seen":"2025-05-07T23:14:32.984234Z","last_seen":"2026-03-05T01:51:56.399283Z","times_seen":8,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/js/smartsupp.js","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /js/smartsupp.js HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1VR06uohKZ7M9RYmduOkBFjvPMAVZiq%2BaSjFV4bn6I5U4ehrua0jO3VMn%2FROgchHYRmuYRFX%2FMNkanuutJz%2BBBe4JdjXNGTcg%3D%3D\"}]}\r\nlast-modified: Wed, 25 Feb 2026 11:22:36 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699edb7c-f32\"\r\ncf-ray: 9d4fbd826ba0dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"66a1b8c6f1dacfba5347cafa0a58b14b","sha1":"6de31bd1bf05fc2ddda382bfb8890f07c346a084","sha256":"1c94613732935ae46ecfea0f7e56e9d0f89209f676c0a0efca02b1202c0ab132","sha512":"ea59e63fe3d9c7e279a3cb0a06eba4c7ff9fd200edf21f9cdc539357db63689a2fd6746c947e6580d801e7fea4b407c05f9457d5f90b82249e7ec10bdd6b54bc","ssdeep":"","tlshash":"4a818a1a5c901ca0037a1bb06a5be484fe26bf5f0198061f757cb98cef72816cbd5eb5","first_seen":"2026-02-28T11:57:18.155808Z","last_seen":"2026-03-05T01:51:56.421519Z","times_seen":4,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/Plan.jpg","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/Plan.jpg HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108148\r\nlast-modified: Mon, 16 Feb 2026 11:17:59 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce7-1a674\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKUo8o3%2FvJsWugqbaQy8xF6Wth8kMaYQDuaNErFqqSzH5KXCG%2BhqCKkTWISxUx2E4vjUNoMz%2FhPLK0xvIFIoTfypL6pUzB0E8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd826ba5dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2160x1500, components 3","md5":"3125ca66b57f5ae2b8a388f0813946c0","sha1":"11ead40d05826ddaeb905715fb7705dfc9b1caad","sha256":"f889d3954892bf2c414c6284b459b225fddd1a01980585cc83ffd1638ef775cf","sha512":"deb28fdc64c8ce4dce2e7cf775d62c6d0899353186251acb904f08984eaed8b474597c720405424d378ec98fc8516a96b6ca16d81a2e816d870617080ce9168c","ssdeep":"1536:nvflL47jeShY8Q1BYfVgrhvWgXDtZIKZw8l2Ot8Nietd8+KM8OqJfVl:HlyjekYDB4Viv3Tt6KZw8l2OtuzYMYVl","tlshash":"5eb3d0d6eb95923fe9093b3d401faa321e350c169e46287724a4de33d532becdc9b154","first_seen":"2025-05-07T23:14:32.991099Z","last_seen":"2026-03-05T01:51:56.436093Z","times_seen":7,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waxai.app/images/cloud303.png","fqdn":"waxai.app","domain":"waxai.app","tld":"app"},"ip":{"addr":"172.67.187.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waxai.app/","date":"2026-02-28T11:56:43.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waxai.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 00:46:30 GMT","end":"Tue, 19 May 2026 00:46:29 GMT"},"fingerprint":{"sha1":"E1:C1:1A:4E:07:FE:91:EE:5B:D8:3C:9A:22:37:E5:B7:F3:3B:CA:C3","sha256":"19:54:08:38:31:4D:15:4E:0B:96:1F:9A:40:76:16:B2:B9:94:FD:D1:09:A7:4A:0B:57:9F:BC:3E:5E:10:CD:60"}}},"request":{"raw":"GET /images/cloud303.png HTTP/1.1\r\nHost: waxai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://waxai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Feb 2026 11:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2072\r\nlast-modified: Mon, 16 Feb 2026 11:17:52 GMT\r\npriority: u=4,i=?0\r\netag: \"6992fce0-818\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UR5lcWG9waj43BdcYxF0PRcnPmOs%2FJu391ssOCPf%2BwecgRMn4r4peR%2Fb82BfHB7a6cTfjFYyv%2FsOrsIQ59RNfJ%2B5eVjX57mSSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4fbd85cc23dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 80, 8-bit colormap, non-interlaced","md5":"f40e22dcde448a6828d0f7312ca9049f","sha1":"ae127243ba05aa2be427893bccd0e4353db54979","sha256":"064a76708dc5dab88eb097e7f8448e68aae816fce0232c1106e0626c0e321655","sha512":"4f6096012ea9f4bc40c44c51cd5400f56e4a3e18a77783c5f33719cb11757d8f4ef5f7fe2ad0db84f38f7f72fb58a6b637bac660ab3f3a03be20f5e976a5c03f","ssdeep":"","tlshash":"81413c6983333d37922b47a6d5cde884189edd9c1db00f8b29cde61d74ce81d9754252","first_seen":"2025-05-07T23:14:32.960524Z","last_seen":"2026-03-05T01:51:56.430724Z","times_seen":7,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"waxai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}