{"report_id":"d74fd31c-b9fd-4cdd-8f79-4af22fa230ea","version":0,"status":"done","tags":[],"date":"2026-09-04T15:57:51Z","url":{"schema":"http","addr":"wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"title":"Yahoo - login","dom":{"size":3004,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ec489116517e03a08e40bce5df4ba6a7","sha1":"4d7e539fe1c257aef963d386f3df9aec54345c5c","sha256":"df2b425d5a0c1a02b3459b8e4ee1af4767354224e48a6a1380a7eebd740c6959","sha512":"16fbfef281ad9b022316b2919ef5094e6ddae9b2a72f46d721c799587cd8a93a971a6519dcc0904c791fdcd41895d520dea2f69a360750a10a19525c6b7940fc","ssdeep":"","tlshash":"c35151661f0f181ea022d2647ae26b59053ec137df16cd78be9216b9cfc95588433bc8","dom_hash":"domhash1a3a10d16848394d9acc5454f575e7c8","first_seen":"2026-09-03T22:39:41.912872Z","last_seen":"2026-09-04T20:58:09.447769Z","times_seen":11,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T15:57:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"wenaxe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wenaxe.com","ip":{"addr":"162.241.224.224","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2018-06-26","domain_rank":0,"first_seen":"2019-08-28T11:00:47Z","last_seen":"2026-09-03T22:39:41.348639Z","alert_count":4,"request_count":4,"received_data":31102,"sent_data":2745,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-08-31T08:43:22.767816Z","alert_count":0,"request_count":1,"received_data":86562,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"smallenvelop.com","ip":{"addr":"160.191.77.50","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-06-01","domain_rank":0,"first_seen":"2014-10-25T10:56:31Z","last_seen":"2026-09-03T22:39:41.355633Z","alert_count":0,"request_count":1,"received_data":420,"sent_data":568,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-05T01:41:58.713013Z","times_seen":296135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8bf074e3b4ebd623cfee5d03cac3d78c","sha1":"d2a6b702f7436999b7e2c96527ac7d4e8d90e1fd","sha256":"4e59ca5432df7bb4c8d3e7c02dd83161b78c3028f1266572587f0ad0253d1d49","sha512":"997857e9d9921615d37a4c5fdbc420c07c9d02768e87c2f320d37ee81371aef4ea85fe6562bf5d97a3c56e2b3e78a97abec8340fed79c3fd7988ff9914da0917","ssdeep":"","tlshash":"82a0020ca847d80121f56835093f962d047e742735c61105d0148588b7a9aafe635889","size":62,"data":"","first_seen":"2026-08-03T12:31:10.894891Z","last_seen":"2026-09-04T20:58:09.45337Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wenaxe.com/aa/images/favicon.ico","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","date":"2026-09-04T15:57:14.277Z","timestamp":1788537434277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wenaxe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:21:45 GMT","end":"Wed, 04 Nov 2026 11:21:44 GMT"},"fingerprint":{"sha1":"1D:0F:86:0A:5E:85:98:5D:F0:D8:C6:DA:3E:F1:24:6E:4B:68:F8:74","sha256":"61:2E:D1:61:AC:11:B1:F9:44:29:04:37:35:F3:48:18:65:71:0C:EC:68:89:66:5A:5B:50:95:60:34:1F:C5:F3"}}},"request":{"raw":"GET /aa/images/favicon.ico HTTP/1.1\r\nHost: wenaxe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 15:57:14 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Fri, 06 Jan 2017 01:22:14 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Fri, 11 Sep 2026 15:57:14 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":5430,"size_decoded":5779,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"9796ed786d95606d51be9dab54fb5350","sha1":"6ee48a6f912384d8f9cce8bf7931bed779dc1d9d","sha256":"74368197cb53191e522e3a73aab974d53eae8e38da694a1ed2cfa06f39176e58","sha512":"e9d14ba4486e73ab0fbb30f0c505e8ab2d8d5f55a3f87ec33aae994f3b796ea415564136e70812b6ed09595d1beab345fee1b7199694ce3f12118307065330d1","ssdeep":"96:seB1UfVV/JYEQVg9Dpe/IV/OdBE0pVPU2rBvZjkLcH6bfid:s21U9VxqKDpeK7kVPU2rFicc6","tlshash":"f2b1c596e6042441f181fd7b9b12ed6e30fa2d556540b7b1053af0a7fe782819e81ed3","first_seen":"2023-06-16T15:19:03Z","last_seen":"2026-09-04T20:58:09.451298Z","times_seen":34,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"wenaxe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T15:57:12.913Z","timestamp":1788537432913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wenaxe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:21:45 GMT","end":"Wed, 04 Nov 2026 11:21:44 GMT"},"fingerprint":{"sha1":"1D:0F:86:0A:5E:85:98:5D:F0:D8:C6:DA:3E:F1:24:6E:4B:68:F8:74","sha256":"61:2E:D1:61:AC:11:B1:F9:44:29:04:37:35:F3:48:18:65:71:0C:EC:68:89:66:5A:5B:50:95:60:34:1F:C5:F3"}}},"request":{"raw":"GET /aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/ HTTP/1.1\r\nHost: wenaxe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 15:57:13 GMT\r\nserver: nginx/1.29.8\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1415\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3204,"size_decoded":1684,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"91e7cfbc4293acd583b6d57445441574","sha1":"4c0b4b870a9c91e3e4e5dbee42f71bf049589886","sha256":"2dc0d7ffe6d36a95c3e0ff37a84f5ebe3f2df17615ab6a23767f9b5a01e948c8","sha512":"5e670fa7c53414cca00ab5833f400a194e6041ce19a90732cd40d315d0330852fbe373d714cac43409e76c5e63bbc43ecce0ad37e8450f8c303190d5b160f658","ssdeep":"","tlshash":"1a6175553f0a581e9032d3707bf16759c83ac1734b134928b6a915f7dfd955846336cc","first_seen":"2026-09-03T22:39:41.928046Z","last_seen":"2026-09-04T20:58:09.452093Z","times_seen":11,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":4,"connect":150,"send":0,"wait":231,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"wenaxe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","date":"2026-09-04T15:57:13.856Z","timestamp":1788537433856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wenaxe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:13 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:13 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 192360\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":31012,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-05T01:41:58.713013Z","times_seen":296135,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":15,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wenaxe.com/aa/images/h1.png","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","date":"2026-09-04T15:57:13.861Z","timestamp":1788537433861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wenaxe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:21:45 GMT","end":"Wed, 04 Nov 2026 11:21:44 GMT"},"fingerprint":{"sha1":"1D:0F:86:0A:5E:85:98:5D:F0:D8:C6:DA:3E:F1:24:6E:4B:68:F8:74","sha256":"61:2E:D1:61:AC:11:B1:F9:44:29:04:37:35:F3:48:18:65:71:0C:EC:68:89:66:5A:5B:50:95:60:34:1F:C5:F3"}}},"request":{"raw":"GET /aa/images/h1.png HTTP/1.1\r\nHost: wenaxe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 30 Sep 2019 21:04:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19164\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: image/png\r\ndate: Fri, 04 Sep 2026 15:57:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":19164,"size_decoded":19411,"mime_type":"image/png","magic":"PNG image data, 1365 x 653, 8-bit/color RGBA, non-interlaced","md5":"432b74a0eb557bad1caef9f124859859","sha1":"757176bbd5d8a0d9ae9b828351664166875f09c0","sha256":"27806952ca8a0343bc37771d2bf3d4909833e98625944b90c154a1a19f7147ae","sha512":"d705156f246f2db31bf6658ba8a202558067b90c182fd1109ba8097f51530c6b5f91cf84b04ca89c58d88d82a44c415a0c2ae9993be8ea804f3ebb5a14aa8d72","ssdeep":"384:XJszrFVqaxnCkU1covR26+z8bTsSkJlyrzmZLT7O:XJS7qinqca+z8sJJlzLTC","tlshash":"29826abdaf19032dc4decd3023d11aa9f6f15969587093afd3a93a70de8dc613c29204","first_seen":"2026-09-03T22:39:41.916379Z","last_seen":"2026-09-04T20:58:09.448448Z","times_seen":11,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"wenaxe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wenaxe.com/aa/images/h3.png","fqdn":"wenaxe.com","domain":"wenaxe.com","tld":"com"},"ip":{"addr":"162.241.224.224","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","date":"2026-09-04T15:57:13.862Z","timestamp":1788537433862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.wenaxe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:21:45 GMT","end":"Wed, 04 Nov 2026 11:21:44 GMT"},"fingerprint":{"sha1":"1D:0F:86:0A:5E:85:98:5D:F0:D8:C6:DA:3E:F1:24:6E:4B:68:F8:74","sha256":"61:2E:D1:61:AC:11:B1:F9:44:29:04:37:35:F3:48:18:65:71:0C:EC:68:89:66:5A:5B:50:95:60:34:1F:C5:F3"}}},"request":{"raw":"GET /aa/images/h3.png HTTP/1.1\r\nHost: wenaxe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 30 Sep 2019 21:03:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2193\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: image/png\r\ndate: Fri, 04 Sep 2026 15:57:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2193,"size_decoded":2439,"mime_type":"image/png","magic":"PNG image data, 302 x 44, 8-bit/color RGBA, non-interlaced","md5":"7fb0efaccac98babd24f18519fb2e2c3","sha1":"9fb48dbd9e7ab8af2be09e1f43d71a2e90196407","sha256":"7e7f50d3adf8f1e0ba6365272a1e5f660315d0facaba964894e9fc5801e36d0e","sha512":"db9958d3f1d69bd288f579a3dcf576952146e3441bfed84c4977802f26bf3dcb87851f19378a8a1191ffb501bf3374e6151c93809d3aa2fa1d2c9b1df2b42459","ssdeep":"","tlshash":"f5415ce0186c307b9144c6b3b4dde6f6502caa955af796df37d486da6b3843c31088b9","first_seen":"2026-09-03T22:39:41.919687Z","last_seen":"2026-09-04T20:58:09.449198Z","times_seen":11,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"wenaxe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smallenvelop.com/wp-content/uploads/2014/08/Preloader_11.gif","fqdn":"smallenvelop.com","domain":"smallenvelop.com","tld":"com"},"ip":{"addr":"160.191.77.50","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wenaxe.com/aa/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw1774256418\u0026fid.13InboxLight.aspxn.1774256418\u0026fid.125289964252813InboxLight99642_Product-email\u0026email=verarpro@43504d341bd8f8a77e506b1b4c2f82aba0a2.org/","date":"2026-09-04T15:57:14.005Z","timestamp":1788537434005,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/uploads/2014/08/Preloader_11.gif HTTP/1.1\r\nHost: smallenvelop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wenaxe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 04 Sep 2026 15:57:15 GMT\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T01:58:25.903838Z","times_seen":18284050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}