{"report_id":"0a75beae-c087-484c-853f-8f03fcaa8a09","version":0,"status":"done","tags":[],"date":"2026-06-30T23:40:58Z","url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"title":"Cozywin | Decentralized Web3 Gambling Site with Provable Trust","dom":{"size":682834,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (53360)","md5":"1ea9f88b61f8689c3cd3354448f06cd0","sha1":"57e17b49002a951793929eeaebbf1822be3c1ac8","sha256":"7ed9d30fc24aa0d3fd40ddf71b5d6447d9d68f31e2818a20ad3f91dcacbd9648","sha512":"31dd0b7c604e05b3b5d6ee34c4e20c2005c618330f7ceebeeb549a05cadd798fcfcc5a71a4e376bbbeb49804617dbdd09fafa36bb91464c9015908ce85331282","ssdeep":"12288:EULCdti6NxNTiLAvU/FvzXf3lf3Eg/Fv7AvghHvS:EUL8NxNLvWrOCsvghHvS","tlshash":"afe4d073b15047d7a20f8b8cf471ad289eac30ffa7d689d8f21849d55345cbad5b2882","dom_hash":"domhash834e2b1fe3bdb3a48295977377af1d14","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T23:40:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cozywin.top","ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-30T23:32:41.011105Z","last_seen":"2026-06-30T23:32:41.011105Z","alert_count":105,"request_count":105,"received_data":5453598,"sent_data":53418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":2,"received_data":99814,"sent_data":1115,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":2,"received_data":12348,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0pui-sg~t8d6m.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84d46429db8f13524085bf5cb4043f4e","sha1":"c8639b27a2d4c5c0ff179b54e803f38b579cff38","sha256":"d5a55ce3f19056582492201fac7b6a73fb75943a6e08c7549d08d639c1364276","sha512":"83647e3eb8526db32d31c08df7e661e8c36c3f5fb550e0edd6abf88b9eca9a1f6c52f01dbd68aaa0d69034f6c577be866362346c8c03f5c9003d9bc1f47d987a","ssdeep":"","tlshash":"8b611066524923f53f322a4c203fdc9e510ab21cc6464cf5261584bd27abf91b8a7fcd","size":3259,"data":"","first_seen":"2026-06-11T16:29:30.36988Z","last_seen":"2026-07-02T14:25:44.079175Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-02T16:07:35.855493Z","times_seen":177217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46aedb53c91f2437dbe7ec1bcfd1249f","sha1":"1bb68a6345f4b1926318ef9a92fc759ea4f54f7f","sha256":"2c60f96e7b23a27520693c5aca168ac26bbd78476a866093255234f75ee1623e","sha512":"0c8adc0a56d9018a2b9c239d0b832c4cca717f502400e2a58c8e2289966ebb716e74c20ee2024ce16807a157608b8d5e4c5d3a344447660f996aa131d664ce68","ssdeep":"","tlshash":"62515d4ae84ffd112930de9f062f4f3a88d4997b82b5916db79cc8c94162db7038cd81","size":2545,"data":"","first_seen":"2026-06-30T23:31:18.381764Z","last_seen":"2026-07-01T20:13:47.916828Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df712d967cb9bee2d9ab7abeb1cab8d7","sha1":"8671005a7f48aac7995f0a3ab454ac3d63f7a2f0","sha256":"a2db97dbea89e86a5ea7b8f78d7e8f6bb21c22828e848bdae8a24d137c042579","sha512":"0d281d0fff71fa2af2d663e81c7f7cd8855b6c90fcabb7fedf1d8830ecc065218144ba4985bbdcbc1d48f06fe5d770d1e1c9cb6303d1aa00a16e072171f17a7d","ssdeep":"48:LZVODbWa/+aJ3QhV1fhV1ZoWnnBn6V062/XnSDnBn6V062/og65pbX73O+dD/+Cd:LCDA131ZBmMSmMxgp/nEnGDmDA","tlshash":"20d1151f680ade06dc3e7c69023e9d3750cc8e7b8765daf5c18ece991a065b627d8c81","size":6183,"data":"","first_seen":"2026-06-30T23:31:18.382978Z","last_seen":"2026-07-01T20:13:47.917431Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d272da3a9b09210f4dcc16a89c5ad139","sha1":"af672ed622ef035da837f84c4d60dd22f6ad235c","sha256":"ad146a41054785a01620614b59e02ca6b0b8cfd0a8871d751947994107118fc9","sha512":"dfdc9b90c57dbe296e15394b5f12d96c3249d12f61fe6c3bff42dee4875cf4ff97dab3859a889bda322207959b2e82588f7fe8e51407c6469d0f0b9b76a94969","ssdeep":"","tlshash":"15b09b64f015fff555a91571653de445325f50cd595c1470151391a51709d142717ec0","size":123,"data":"","first_seen":"2025-12-17T10:01:40.746958Z","last_seen":"2026-07-02T14:25:44.129186Z","times_seen":618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cde1220258a0ac4f98ce24972b2503cb","sha1":"b1aaa250b15bfea94c39a28d82e32287252d6643","sha256":"8c86109b5ed00e9594541eec16aee2ad26e11888c01124da7d8676fea0833751","sha512":"e78b962007d08d0e1cc694bc59d202f052e6f7fff1350f65d609e653facb4f7af6f9f17e8aba6fe434a4a884c30ec43f37772c0238acc74ac648291f2787ecb9","ssdeep":"","tlshash":"b5d02ba1cc13cc0dc2560f19287e6c3521ccc9b403055107a895c97c1d86a3449e0d86","size":268,"data":"","first_seen":"2026-06-08T19:33:12.080994Z","last_seen":"2026-07-02T14:25:44.12974Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f308d29142f901ea719041af00f0cc5","sha1":"7da69f745179ea6eb9793e5a877c99d779002726","sha256":"0d392ff5fa94f87f4f9ed76167c6c0265a6c865d0571b65a5c693c370206768a","sha512":"58f1b6f775f6ec08d7042d6a0c4b4df3aa5d52aa892e4ca462930a07205da8b32b3e4cc30e60f6cca61c33b8c19b37fe9aaf513694c7ed3dd3d23b65a6b6dbe9","ssdeep":"","tlshash":"cbe0ab329c21ee45cfa7d8382a3e9cc130ecd1b543005294b5a4c92c02837308cfbf81","size":410,"data":"","first_seen":"2026-06-30T23:32:44.804027Z","last_seen":"2026-06-30T23:41:03.64179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/turbopack-0ecgschtaudos.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ba2cb91d34ea9e9369784ebe9af4389","sha1":"384f6cf4bd44ee8abdfd3c2b3239164fd7d59351","sha256":"54a5acf97d9eae9f3ec52b7fa09d3b076f41747ab972ea5c3a84d6ac1cc71439","sha512":"c7e178c33990e900f1d7720cea3451698680da7947b01a43114f47f2ed2c308964cd3f024a682e9937d87485ac64f3e708048a435e3bbbdaeef1641c78a0dc62","ssdeep":"192:z4gMFB683Esgdo2YE0hBG/lhjTNWn+S3sBT4fCT3cXXqroor2:z4gMFVgOQ/lHW+ssqCTMKA","tlshash":"8622c8da37a6f07343af94e7906b4004f17d84a9145d141cd3aca8eb2c394ae85e7f76","size":10581,"data":"","first_seen":"2026-06-08T19:33:12.036767Z","last_seen":"2026-07-02T14:25:44.113772Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/07b~lfkhc7~f6.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"109cacd54b4cb00227ca58e34d8168ca","sha1":"9af3b7bed6b65acca8080874a47307e6a0d6b3a1","sha256":"4de148ca2676f0ca606715a307cd028d1cfa6f63a59f5ec45f259e0bfea61faa","sha512":"9c40e0ce244052efb8a56fcb6146993d50584716e713a4880726a2dacc446dec383d3f16b1e2f3888a414c83f0b633b3cbd87752e4d338764dcaedef96abdbf0","ssdeep":"3072:79zcwGUN94sY8YzaPnx1ll779zcwGUN94sY8YzaPnx1llX:JbBN9nQwZJbBN9nQwB","tlshash":"5ef3ef35d8d0aeda231c7be4d9051ac64bd1f0920022e9b6ef76709be8f4295f7d1836","size":172200,"data":"","first_seen":"2026-06-08T19:33:12.017045Z","last_seen":"2026-07-02T14:25:44.108462Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/fbq.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-07-02T16:16:42.325658Z","times_seen":24760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/ttq.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","size":1006,"data":"","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-07-02T15:26:26.185887Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0byi9c1kdhku2.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"470004d83dc17ce8a5af09b41645873f","sha1":"4dd466d16f5d678758739f65ee505d7bd1a9f3eb","sha256":"aafac24663931328ce86e1020ae08240ade0ed88483fe7b49857003e6117ed77","sha512":"88b8a0ca2bc6512349653c965bd1c63cf7a36581d7655266f96718a2a4dfab1e2183f0f87d30cac385dbddf38ab8d32c84e371b83c44572ef2dd5eb9cb920179","ssdeep":"96:2p9YtpkojrYpGpUVFwAchp91tpexVfQApjFpBTpcFpe6UuWHSvUpp/TMvJ/pPg:wYbjr0wT1O7P0TUudYUg","tlshash":"bea1456fb04823902752199d21bfe4cdb02aec799b05186cbb91c17d27d2d98b1b6fcc","size":4922,"data":"","first_seen":"2026-06-11T16:29:30.421395Z","last_seen":"2026-07-02T14:25:44.09501Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/155bi7ep2xvb5.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10849f5c50fd247b8474e2fa814c102c","sha1":"29ec98a9b1d4011dc2915ee1f8e2647b5d5bf95c","sha256":"172af026257cc0c461fb8a91b872fc6a36615b13af56fe7203737bc181e0fc67","sha512":"8270248e1a353e9d5e53f5c5b698d97f75e6227b3f6c3d96b1c1647dd9d0414ebbe61ca93b2c11f3bf444fe6a1337150ed13593b1b2b46ee9ab21fe1a97d277d","ssdeep":"3072:t1wANU+dlIu9NMBzhtW+fYuJ1qci4fn4NHDShvOsN52TItb0:t1wAm+dlIunohHfUHD+FN52TItb0","tlshash":"c134fbe83955f6626ab302a710af1803b338252b280d4d60a351fd9db57845fb17bfde","size":231723,"data":"","first_seen":"2026-05-17T01:00:58.350766Z","last_seen":"2026-07-02T14:25:44.047551Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/12lp94j-.c_mt.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e739de1547de36405dedb135277b1f71","sha1":"a2ae6c5a9ccd2a7b0a2c3513af23ce6027350983","sha256":"516e6be72f41061589fd880467eda5e65367f672bf3965d39f04192c54064b22","sha512":"38d927879984614c350d69095ad051428407df75b772003b1a9a02349b8cb9fc11ed9e4f70e82db8494ece45b4c391f9686b521446c0a75b74d4fa7b7c8287ba","ssdeep":"768:YhBJUosw2zWLEImqD9nhKFXA3tkBOfCCDkZRQqwQV:YhNUAEI/3na13V","tlshash":"8943c8b53291faa342db91d9c0370012f2780d71309d64b4b3a4d8af799dd8e92f6f69","size":58029,"data":"","first_seen":"2026-04-09T01:35:59.256618Z","last_seen":"2026-07-02T14:25:44.094536Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0v0ixs97.v7n5.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95ef99c841282f013e4d316bdbf10391","sha1":"f80792622b31b0dd0d1e74be890cd66f97e0d423","sha256":"7235294725f74bc429f63b3c0547001aa7e7e3f3d41af140d53b973f5e2d9368","sha512":"8a0be5bb197316d7444f9b8f3a62d528e5a286c8cddf782fb8bd0ea1fcf5c488c7d422dca571d7d0efc18eb47b3ef33e19aad8b9c097396fbbebf3d80388d481","ssdeep":"3072:yXi31G2FJlN+XTGKDXKBGchpLjdLWVwNrJqhWq15014BWiJLe:yXi31G2FrIhz15G6WiQ","tlshash":"dab37dea7342b435836b805e416f8506b23e2d64580e0c19f2b9d8dd39b4949d2fbf7a","size":108049,"data":"","first_seen":"2026-06-08T19:33:12.050394Z","last_seen":"2026-07-02T14:25:44.108999Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/03fg85j1c363f.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05cda99838f3df07eb438b054ce7d2ae","sha1":"5d7ba1308daf2a223c780b365a7123a12d2a56af","sha256":"72a35adf797fe33e0548ce20a161ab102a616803284bfb50f3755bcf8a8ae9b3","sha512":"b5a255650f22adcc0c518c24a86d52d2ac36bc52845302fa088afff62f41fd3467d822b72ca1f20045b35c4f9e9abbb7754bffe1d4355563a6cf60984e3348ae","ssdeep":"12288:yibu0iI0QXDQnq5u0FxIijiw9LUoXQM+M0qizOVNkUoReh+YoJLPP8v0hxQ0zPV5:tbDiX+NRv8tB","tlshash":"fae45c696025213897956090c15b3446efb1682f2dc944acf7b8ecef57b4e8e332af71","size":667746,"data":"","first_seen":"2026-06-08T19:33:12.046227Z","last_seen":"2026-07-02T14:25:44.093553Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0gtqnwqp2jd2_.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbcb0a523d301ba7e15c269d3a124232","sha1":"fd263d422ba3e2f5182f6a75b8a96fa1d3ed4112","sha256":"96fc85ad0a723d02940ba6592f17047ebd25055c1fc7e4fe0b171ab0a8b1cb10","sha512":"f9b75df2b08996a17fd9a03d7107a02c50487bddd3fc081e685f5400206f13692a054c49917a6a720ab7e70797d72a6a4e4dea29ccf7f320431daf86a5d421c8","ssdeep":"1536:c5gCTP3oPWPyx34NhAG2CGpDWLmLFCKxgogH69pca719HnZh57+rzDgdjruQ8CpS:o//PyxoN/Lex1gH6JRRwDXwpVol","tlshash":"72b31a17d24423f217512695740f69c8b3bee9c41b62946cbd99803d23ac9e8b1b7fec","size":118151,"data":"","first_seen":"2026-06-17T18:29:29.90313Z","last_seen":"2026-07-02T14:25:44.087385Z","times_seen":348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/136wspufxw6fc.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4004a07390e470c485dba5c61fa4b70f","sha1":"46e8e42a20cfe1e766d29da65f3b071143863fe9","sha256":"35d73b5e32141bc85bd97a3d47e035e94d9cbcc49c3b2a1fec84bbfc79a2934f","sha512":"89eb61b2f4b2ecdec634a576527c4711a93d977ed01666ac5bce8b8a290cf8197a41c6665ca696193e5998b3510716eb241ca5128c3e8ab408f16cd710949917","ssdeep":"96:8NpZW8YpPMg6npt1npYA7npUvWh+bLYhfnp0Wkc9OIUdnpzp53anpYvZ0Bep0WJe:4KbshpdclXZ0B/Me","tlshash":"6491fb1a514932e13b222a8c303bdd4ea11ab05cc6164df56b6584bc27dafc4f867fcc","size":4529,"data":"","first_seen":"2026-06-11T16:29:30.477923Z","last_seen":"2026-07-02T14:25:44.031781Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0jl0ksk6-5qz8.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27952518666dc478e2ffc910e0f33b23","sha1":"b7668fedab824415a8adaa1d5ea97568b85620a0","sha256":"f1d895571e774ee555761fd87adec9416ee9287d57544e01bdf6105b9dba3d46","sha512":"3fa0819f00e424e20971b4c076b200ddda0c27351df9916e99951f93791fadcf312b9beecfd7837bc1c404dce17e69c43470e868181ba248e2fad0aace3e1a56","ssdeep":"1536:h1otOBTamMABecSsuowgKh8Y3wQNerj1+sXYzQb1:h1NavDhw1+sXYzQb1","tlshash":"6583a846f0f4e7faa44d0a5ce41f4018e79e2dedda846df8d7acacb012114e4768678e","size":81112,"data":"","first_seen":"2026-06-30T23:32:44.791734Z","last_seen":"2026-06-30T23:41:03.62006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0514pcijmsasy.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed3d466c2d251d739ca14bdd80caf061","sha1":"38eabd2cd88e7589c09720b23fe926fb69e7bf2b","sha256":"290816770359c2131dc4f5bced87b4de8567a75148300b6d38673561b0e80fa3","sha512":"b56e083f791bc181b92e28bdedb61e18924c835f4b3a50de7cbb37862ac0dc18305a4621ecf1f2ab5615551286ef133723ee259929a8db034d10c06dd5f4d370","ssdeep":"192:k21OmPkG5HtOCdVC8+BrTvk+0tDq1ZT643MN3WYtdUo2RBRmuk:J1ZAEKcDqf23Tso2RBRmuk","tlshash":"8c122a94f1a07936035746a3a1ff0702733a89595c1f84ecb1b888882b71e8d11bff9e","size":9691,"data":"","first_seen":"2026-06-08T19:33:12.061464Z","last_seen":"2026-07-02T14:25:44.12442Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0li9mgra_8nfx.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c1ca7911b574ce20daed1f833b108d6","sha1":"bee0a37c5dc9d23fa8e592d34529399de963967a","sha256":"eebd59a42ffd9f0a8cb12ed2797fba5025977de2ab885cfb28df20d9d2f92ef5","sha512":"628e8fcb0dc70c2b54ade8cb8b86552ba3a81882c1d3ef21162f7eadf578a7f1e1f03f0b59fccd849bb2e5e4fc4bf4df4dd9776c2ed575969f07a23c0416619f","ssdeep":"768:6jWexfqnDkUHRqSEyu+bauIS75xh+3BdOkgRt:6KetAkURzRb7xwxrit","tlshash":"c5a342476395e41e8f73dba0e91fb767c2184cb959638926d10d0ea4c94f8e1caf603e","size":103921,"data":"","first_seen":"2026-06-17T18:29:29.887806Z","last_seen":"2026-07-02T14:25:44.081865Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/twq.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-07-02T16:16:42.306537Z","times_seen":24754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/16rmwuk.q6kce.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5cbdef62f70832a02868c81bed4d0cd","sha1":"4d77c0b7342c6700e8dce963de3136d937d75b23","sha256":"1772b49f52d973040f54ddfecd3ec3c5333a06566491f44d881a06852d94ab32","sha512":"fcde5221d5f85fd6c9077fe4092dfd79e9901552845905b925e095b1be1cc2de0d1ab165ab5aa309fc9db126316de67fab111f21da93129d2c8887c87f886d9f","ssdeep":"768:7AJ81OugdCHq8di830F9Lpl/v+GMd9mML03RnyiGM:7AJ8I+xdi830Fwq3","tlshash":"aa33d6b172d5faa2429380e4d43f2017f23d0c7124ad7470a7e89cdb754898da6bafe5","size":53814,"data":"","first_seen":"2026-04-17T19:00:52.214884Z","last_seen":"2026-07-02T14:25:44.094047Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/00txjv18y81xp.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce6fc1ac19a91ab9b96e5e1a9f282b0","sha1":"8d33c689780551b67888eacf406466aac6275d6d","sha256":"401596fdc663801d8d4aaf96a476f9d2468c085d11f942979cd2b2f4135715d0","sha512":"3d41e06e4f96724a69f2f40c00f8966c19f3e32e9f50aff7ead5fd7bf3fdbb2f486bd228fda15f4804451a5bac96cfeb96d3df1b54f322059f03494fa536655f","ssdeep":"1536:M8udv/NqM7t3AKjSkmE5P1tISAAjJp7BmWok8EO3KqI8GYDNFR9QJn5QExF8:oBAoSkfvtHXjJCOsjI8hJtQ7nF8","tlshash":"be93a657e3241b9a1872727afe4fe181f61d8cbb0799cb50b878e51927c18b87834bc5","size":90224,"data":"","first_seen":"2026-06-08T19:33:12.041169Z","last_seen":"2026-07-02T14:25:44.09306Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0nq1-.97-gsde.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7864538f9a43679ac76e408f43200221","sha1":"93cc5559c96d4bbe8f53dbac9056ea68695ef00a","sha256":"4a59e26c8de7d63d905eaa693c2fa7dcd3f9ae43ddeb67fee0564763342c362b","sha512":"ea28d67304756399c16e810dfe1623c6474758c83137fba87189c126b8ffe8a21c6da3156d8de5c8eae79a6308ba406aecf5eca6372550c77c90538a25ac9d93","ssdeep":"384:KgPN/B22tHVKCjpjtsFUjjvmz13hKW0KInG/as1e3:HP322tHAE526qJ0jG/543","tlshash":"38720a427498fdfa0b57d39cec6b8004b17e297ed98c80b98f6cdda0317594a7094f69","size":17179,"data":"","first_seen":"2026-06-30T23:32:44.712212Z","last_seen":"2026-06-30T23:41:03.631988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0.tq3hqv052nt.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc8cb2a59489c1561ab34843f6ea999","sha1":"5af3abb3d1dbb398bb131d6cc4976c6df6113a9e","sha256":"07b5b0a411a49989495c74530e109e477f9342b2dbf476217bfff08e0be0af3e","sha512":"5b14c7c64ba184c60488cb10d5096482538946ccda7801ecdffbec8c2b2cc70394be8baf3924aa04b70b00963afff814b388e8429a9f2bf476ef3c381da6c289","ssdeep":"3072:pbPzjb93YLLBpqE2O4dwg1ZoIUtQJ0aqMuB:pbPzjb93YLLBpT2O4Og1Zit2qMuB","tlshash":"8be3e6f935d1f88207ab50a6c03f0006f22c4d77189e6860e3e5ddda756465de2b3faa","size":144579,"data":"","first_seen":"2026-06-08T19:33:12.034645Z","last_seen":"2026-07-02T14:25:44.083183Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/06jljm--ci~tu.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aedfeefa1e80779099b9587ea3b1db29","sha1":"6a48447697ef6c01db549d36c6e38f1d20060ced","sha256":"1f315feaa50045554919b51284afb4ac2967751c6f67f84fe41687a3f01c55f8","sha512":"db2350c028befd1718dc036246f4541da89160807ba1159f058fcdf8d99e885a6b0eb8a266f3a7d35c64ce5938a06ebdf6b3a08a252b94c0b5e6ecf3710ed20b","ssdeep":"96:UXsY3Gv2/EP3DwgZA4b/WMJYBSaWHn5GdYLIa7sbc3DXTNDXTrv2P:UX33h8PDwgZNWMJYBbWo/a7sbc3DZDGP","tlshash":"0eb1c7b776c6fc70415685509837834bba182e37309eb0d497eaccda327ce4a85d1f9a","size":5218,"data":"","first_seen":"2026-05-18T06:46:56.921829Z","last_seen":"2026-07-02T14:25:44.10248Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/09m28z2r~.w8j.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"295cb7b39a766115859fdd340bd5d661","sha1":"4f8bc00001417248ceee285064417928d803a6b5","sha256":"ec7bce2e98540116bb9d28db10d536e7080f5ddaa0857e69c61ed1be3eb349e2","sha512":"68efe9be524b8e18376d1e860d1005349b1f4a730ff580d5234cb768e006104667501bd4df92408b23368685d37bcaee494016ed18cd363cc1a939069a6493e1","ssdeep":"192:m6QqMOx4O2NbkLEOrd6kFJwiKDcyfKm4i5LEzCQ6aspmi+fQjgEzmQ:mqKZBaj6kFMJCm7Ezsasp/vP","tlshash":"2c62e8ad7155f0a10fa36465407f400bb33929b6286dc5e0e3a2ecf5a9b456ec133f6e","size":15910,"data":"","first_seen":"2026-06-08T19:33:12.049499Z","last_seen":"2026-07-02T14:25:44.090548Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0pnq4eaaz_p9e.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b145a7b648c6d0c066d1f7302979bc57","sha1":"2c500ca3a76eb272e0234917fd7d676cfdd1c997","sha256":"42473573d2b7ad3c181618364cf41a84ab45e5a7ff8e8dc3981fcbaf6fc39eae","sha512":"4175f19e7bf1800e43c3894420300dcfec4adfaa16c1071baa6ec79d470d8b7ceb0c73ba859bf598e47192aa89af659be8ccd032bf3a8792b50a7c8087c2bf72","ssdeep":"384:KgPN/B22tHVGVj+jt3t6jbwmzM5VKW0KInG/as1D:HP322tHcN4dEaJ0jG/5V","tlshash":"8b720a427498fdfa0b57d39cec6b8004a17e297ed8cc80bd8f6cdaa4317594a7094f69","size":17097,"data":"","first_seen":"2026-06-30T23:32:44.784289Z","last_seen":"2026-06-30T23:41:03.607154Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/09ax8xf9js1~x.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc3cc5e6fa80c4b761ca26432d9cd2d6","sha1":"c6ad5387c26620d5e52727cc5220773c26483332","sha256":"aa685f4dee788f3a7174992fd011ff4ab7412aeffaf0b631f750fe536fa2253e","sha512":"7627818dd28ea6e8deccefeae7d39da2ad471e6853267bf6d1a644481d42255f85a11b804662e276f3431f09ecc1ab1891c098d0ae60d0bd6fa3f74ced315300","ssdeep":"768:e8ehunucesw7F7sKaMrxwkXRoOiRLhFHM8XzR46XOUYpJ7NzWxaHLPMbtJpy6xkh:e8ehsuuiQKa0oHMUR35kv","tlshash":"e733e9e2f1d4e2d9e4061b80f81f9808e52e39bdde45ddb466bcaca11f204d8b985fc5","size":51806,"data":"","first_seen":"2026-06-30T23:31:18.320187Z","last_seen":"2026-07-01T20:13:47.849834Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cozywin.top/global/countries/fr.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.641Z","timestamp":1782862834641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/fr.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyUJje8YPC3gSAKVme3ab%2FN3dupqpwyWmWIGgBC1wtv%2Fruv52cRJ7ZOkwjUTTjLvSOhVrAqhl0ERYJu4ucV96u5TW3fW2GmsbAZI1ceAarLk4Co1ayhYEHbq6%2BpMsQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c892c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":826,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"c1a36c711f0ae0ab46c7dce06f63a723","sha1":"5cff6743ac6eed2912288bacd35c363a2d586d18","sha256":"861059eae96aea4c38466209edfad68fbd84ada37bae4ccac92d03011046a524","sha512":"e8d4869bd8d77613770a36de15c23dfade7a3bf3a465c4a6c79be55d9d6660874b5cbb60e631f04964840d3b4d736ceb25f31b30779e8d5ec64023f8e855cdeb","ssdeep":"","tlshash":"f0d02b9dd07de0c448138b703fde31c1418a6326364600dab047272861cc3ef7e40f04","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-07-02T16:29:01.117424Z","times_seen":11135,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/12lp94j-.c_mt.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.441Z","timestamp":1782862833441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/12lp94j-.c_mt.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8zzTk%2FU6s4kaEGSTnDC%2B9w3NfuRNC6JcVoJ9mebKaZJQmyFODZ0XU4xubL%2BqtRONUjAwD2qJvTB0KeeZZRu2Ui56Svph2CzIzFgYlsSpnqmrp3OTXMhkOJhF8tUqw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044509c432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58029,"size_decoded":15193,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58027), with no line terminators","md5":"e739de1547de36405dedb135277b1f71","sha1":"a2ae6c5a9ccd2a7b0a2c3513af23ce6027350983","sha256":"516e6be72f41061589fd880467eda5e65367f672bf3965d39f04192c54064b22","sha512":"38d927879984614c350d69095ad051428407df75b772003b1a9a02349b8cb9fc11ed9e4f70e82db8494ece45b4c391f9686b521446c0a75b74d4fa7b7c8287ba","ssdeep":"768:YhBJUosw2zWLEImqD9nhKFXA3tkBOfCCDkZRQqwQV:YhNUAEI/3na13V","tlshash":"8943c8b53291faa342db91d9c0370012f2780d71309d64b4b3a4d8af799dd8e92f6f69","first_seen":"2026-04-09T01:35:59.256618Z","last_seen":"2026-07-02T14:25:44.094536Z","times_seen":481,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0a21ve5v9f8f~.css","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.704Z","timestamp":1782862833704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0a21ve5v9f8f~.css HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3Lf8k1PO5dq880qbDQdMD2TfNTp3mTvotvOzGifwk1NgALzzmQdkuuu%2FpkGN9gYUSpe6nMhpoDxwB0ouvsAdhfyLPzJJOPgDVEpL%2Bn3Z5VUtoEWrSdufYk4hWH%2BOQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410446ad3c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2687,"size_decoded":1343,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2686)","md5":"73412fe569e1f16f6b670c83c1b7fec6","sha1":"fad9338a1b36ee3fecd68653cee6c826390b1df4","sha256":"de4bc1ac4c5c1364679bb70a6f6e16426987f6f3d0ccdb18e32dc374212fbd93","sha512":"c77bf771f7bd0383ff28e3382a3819428c13a42a5f7b1651b4c01caeee04808b4250f9924cd247b70a11476689c6dbb9573e317c6172695e4ee8a72873be0caf","ssdeep":"","tlshash":"78518b199cb483ffc8496012f5582c588642edd4dde29bd14c0b2ce38386af32ab1739","first_seen":"2026-06-11T16:29:30.383583Z","last_seen":"2026-07-02T14:25:44.032389Z","times_seen":469,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/ttq.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.708Z","timestamp":1782862833708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/ttq.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHxHR97edtiN%2FOYjO3hKzxsLpExTBNtNXU86b7ieRDle9arh0rG1ZCA6yOCk%2FXaEToxJ2Me%2Ff1B5f4VQMfr46%2Bd1%2FwXCjWWj3aLe0QmhTm8ntnBGGdupejSygCFJAw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410446ad4732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":1226,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (436)","md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-07-02T15:26:26.185887Z","times_seen":150,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/blockchain_com_logo.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.281Z","timestamp":1782862834281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/blockchain_com_logo.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sa342g4Ljy4Jr%2Bbhhg2SWEWUykpVitqNdSB4NzKLU7kCTrbzPoxZtqCUNp7XGN5%2BAJlCDhTbmT6QHzU1q2SadCMd2WoaZsSBld7drR1tH3xDEjLOc5yhZmoZ3yH48g%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a4cce32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9197,"size_decoded":4171,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d2f44273e127f4fc487a433df4d0d2b3","sha1":"dbcea3bfc6321a54bbef208352e5cd9a9f25e657","sha256":"ae25a6e25566b01fe7712c34417466a79111b5b9f1b2f6d6130f69a6bc5733ed","sha512":"8f8cfbaf1f7b848f87b5192d2ee05763bf2bf2244f9ba52951c0356b12714be3b1af7ae5d71394eef78419799f9f2e5fe9a311eaf095f6f4f6944442923809c4","ssdeep":"192:WufKt8w+yCrJvR1zWf9ONQAvisMPwcBcM:Wufr2a5PRviT","tlshash":"251293ee37981ae0e80263f8dd32127eb94f64b3bbc39794e35d9a446652454c948ec8","first_seen":"2026-06-11T16:29:30.472602Z","last_seen":"2026-07-02T14:25:44.116339Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/stats_p.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.415Z","timestamp":1782862834415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/stats_p.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12952\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSPz1CDstJLuolQQ0BXVoAJdZinAvjSZYJ9mvi8RhsmLqw%2BR8BD%2B4vkpoxGQrY%2F9ZY7k%2BsImG0au%2B3qzYp9KIWl9qRMtnHU%2BuTb%2FIAi1FsxypL6BHANbeBa9phUj%2Fw%3D%3D\"}]}\r\ncf-ray: a141044b1ead32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12952,"size_decoded":13598,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f4f9a14052b63203bb9dea22f6e911e","sha1":"e3c7e59aaa3ed2be349cb57623314c53ddb0aa25","sha256":"3eb4fcc599a3702a75eee108ddba0eae8ef6145ac97508be01754777a6d3c610","sha512":"0a792f1fd969658ecae25adaa877d738eb306c65034fdc8d66ff0c1c6726cfe470f566c45f1bb1a63e35fa6bc38bef15a5044aaa0f1285b1015dcc6d649d0d11","ssdeep":"384:ivIeJMVQLTwGzHZfGmag8wxuYQONSJLN9OYKp:SIeJnwUZfog8mZlNQLTfKp","tlshash":"7f42bea0a77af281e54c9754d30945b803d3d8af1a3b09c4af8b456629cbb41d3e9bc5","first_seen":"2026-06-11T16:29:30.366353Z","last_seen":"2026-07-02T14:25:44.100622Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fragmentmono/v6/4iCr6K5wfMRRjxp0DA6-2CLnB4NHhg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.501Z","timestamp":1782862834501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/fragmentmono/v6/4iCr6K5wfMRRjxp0DA6-2CLnB4NHhg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cozywin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25224\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 07:57:52 GMT\r\nexpires: Fri, 25 Jun 2027 07:57:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488562\r\nlast-modified: Mon, 08 Sep 2025 18:00:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25224,"size_decoded":26037,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25224, version 1.0","md5":"989b6974406960015bf5a28c208cff42","sha1":"7fc5fa2c4774415df54117102f667505d521bdb7","sha256":"44c4e39bff5e76652a24a872cbebabccbcfb20f62c4633b27c1f2745cba86b56","sha512":"7a8e04ed1e4494fc2acf491d5a30c29d5a3848fab9c8d4fd7a6244307ffac7ab5c4fa177e58a846d50bb4ea0ac1ecc67bfabe4987d54f3a3d39c14f5a2757f44","ssdeep":"384:gLMHdCiMiFK9zbo8ewJvvw05YrqtY5B8UOb9C5v9079K0jPyc9GGE70+eY0:goHdwNRbmwBvw05YvHnOeS9PPXsdfeY0","tlshash":"a7b2f190fb5d22baceb002310645c5e11ab483be446231172fa926f69b715e7e7f12ad","first_seen":"2025-07-07T14:09:38.817243Z","last_seen":"2026-07-02T14:25:44.12607Z","times_seen":439,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/blockchain_com_bg_out.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.283Z","timestamp":1782862834283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/blockchain_com_bg_out.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62374\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNrhgi032Lv1WudHi7G5WnA5Zt8dEdIdN2KS6IHvyd%2FkccOxY9QeJW388dVurte8MEpUUXN%2Ba9IYUTsnM0c3w02%2F%2BYGBn9fOrTNf8PMImrbjQNbPJ36sUC%2BT3CQCFg%3D%3D\"}]}\r\ncf-ray: a141044a4cdf32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62374,"size_decoded":63014,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9c8c27a8d9a29cceedfd9b374e5d239","sha1":"681f688923a53b406074bfc4bde478edf55a0617","sha256":"870a431e162bf824cce39456d459efd3a67b64a2b1cb290d6526a39bc1fd596f","sha512":"2bc89baae2e1d57a9bd8630f00a4341a144e33bca85fa019ddf58b6d5706c387d70c0cdf441e5cdc6d3a3b2f2aaceecf8ad2d8c85aa077ab7bec791687704df3","ssdeep":"1536:su6lQCXDT8qeCniOPdA5/yeX4xdtJwJAhw/hCeum:s3eCHgCniOAR4hs/hzum","tlshash":"dd53020d4197b3caa83b1529fbe2cb51580530df53e7ef7ef25eca5ac09548a4c2358a","first_seen":"2026-06-11T16:29:30.32327Z","last_seen":"2026-07-02T14:25:44.055148Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/155bi7ep2xvb5.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.434Z","timestamp":1782862833434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/155bi7ep2xvb5.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caSgHbNZxmR5gGCsIG3%2FTIhTkZKrMso%2F1p0lSfENO1GGIrlEgJRSBBfKwnui9PPFKMw%2BQTxUCGqL7obiAWmAemq1jZATOGNKeyLLmCbCqEHAv7rU0wvP0ygdZH7JNQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444f9ab32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231723,"size_decoded":74639,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"10849f5c50fd247b8474e2fa814c102c","sha1":"29ec98a9b1d4011dc2915ee1f8e2647b5d5bf95c","sha256":"172af026257cc0c461fb8a91b872fc6a36615b13af56fe7203737bc181e0fc67","sha512":"8270248e1a353e9d5e53f5c5b698d97f75e6227b3f6c3d96b1c1647dd9d0414ebbe61ca93b2c11f3bf444fe6a1337150ed13593b1b2b46ee9ab21fe1a97d277d","ssdeep":"3072:t1wANU+dlIu9NMBzhtW+fYuJ1qci4fn4NHDShvOsN52TItb0:t1wAm+dlIunohHfUHD+FN52TItb0","tlshash":"c134fbe83955f6626ab302a710af1803b338252b280d4d60a351fd9db57845fb17bfde","first_seen":"2026-05-17T01:00:58.350766Z","last_seen":"2026-07-02T14:25:44.047551Z","times_seen":531,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/api/extra/pixel","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.021Z","timestamp":1782862834021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cozywin.top/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHzrVHIFAbK5IBtrsGhNrZtUJDRRxogP1QaV5O84NkVjofU9Fv935Kit%2BXVwSSkhtx%2F5Mqf9dg62Kamyx%2BGN0rugp7uVcrLtz5TT4b19OHaW2IsYqe2TeCrcfNuKSQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1410448a93332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":611,"mime_type":"application/json","magic":"JSON text data","md5":"428647be4acae0d85bd0799a59237001","sha1":"25b1dbe5aaaf5fe53a11fdb05fd14bcad3e92ebb","sha256":"edad519cb99926a099d84224b6b7427bbfbaa60c6ecc1673c039a0723be93006","sha512":"8ed0b8ab8b00e7883301e4dc47e6ae3c38abe1686e6de48d43983fa8105203f86c36b86cff1a09c9bdf9406ac7c4ac2f8b6a8654a42e1b5d03d843b5085428dc","ssdeep":"","tlshash":"f4a022c30a200bc2cc00000008203b22eec823238300022bc00c0200caae0fc30c333e","first_seen":"2025-06-04T11:30:16.150294Z","last_seen":"2026-07-02T15:26:26.18796Z","times_seen":16844,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/rewards_bg_out.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.259Z","timestamp":1782862834259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/rewards_bg_out.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52940\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFF99HUKe0huiVWtbTJTv%2F1xjlIIHZCBzAnAvrUsCgCYSq9a6QIzM75t3IWeJNM9%2FF%2F4a7i8e3%2F20k%2FeWPyJtT%2FIoyiZV4e6wg5AZqcijpHh0MgsOWm8gNIVe6gZyg%3D%3D\"}]}\r\ncf-ray: a141044a1c9532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52940,"size_decoded":53582,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ddc20350f34080e2d4914c6227ae7eb","sha1":"b5acc8f43a25f66efe1aed522a6161b1f5100ac9","sha256":"6471b8e1bb0be5285be8e74c0e5205c7ad8644c002e19881979894bdfdc253a6","sha512":"0f76a96c7d1c73cac004370995594fda035b1612f23ef2bb7a140154e33c23fee53c15a1a48734530ee1bc56064b26aaea3ebf59ff6e42224a7cec03a98b2e21","ssdeep":"1536:YN2P5sT2M9A3fMlQ9FDDh8dAZQJB1rUnWJ7:YNA5sJneDDKCQJ/UnE","tlshash":"a733f1cb70b2863eee4f27a14e6e2476584e5b497d91f15ec01c0b3b819f17cbb82856","first_seen":"2026-06-11T16:29:30.392779Z","last_seen":"2026-07-02T14:25:44.099265Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/crypto_com_logo.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.266Z","timestamp":1782862834266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/crypto_com_logo.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyL0k3Jmw7wjTfRGUv5q05xeh26mVvTzrI3JdMJmFS5ZjmI5Bc0B2avGECHC7eXsrH1T8sIf8zk8lYcEKcOlj%2B46gYHqfgwdsL40SNcon%2FOyTGdNgzTWrz6VY%2FN82A%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a2ca532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4690,"size_decoded":2431,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"09e23867a1177094de847ab5a1f72fb4","sha1":"4342a048742832a0129f583551afc2d42d075079","sha256":"2ef5de7e75c4d0a0d442a9a7875ac2f85ce73a6266e2a56a751cadb25f621e06","sha512":"7a9e5a65430a6c804dc78373c36804e33c59f1dc72e4c1c2e74c38c20b56da3f36f0dc3a80962b99cb06c3bfe7c847d9ad640256df717ae5b5d33ed7128e6177","ssdeep":"96:bssQY4lHOQ6aQ0WQa2Y1flnczvd64v+DoJnP1YbaBLZfc2lB:bjQ9lHOQGudUoJnP1W0B","tlshash":"98a152e9a2dc92e8e982e7f4a7295031ba2d39f9e747d742f35c0a40af5115d9c0dcc4","first_seen":"2026-06-11T16:29:30.463917Z","last_seen":"2026-07-02T14:25:44.102954Z","times_seen":255,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/question_avatars.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.309Z","timestamp":1782862834309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/question_avatars.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24984\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sG0FsC%2FlvG4JqiVJkWciUMNcQ3AWMfiwavHAezMHJdKw2OlEzlOXiWs8p2CCQQxiae7XIUQZVEc69RACnTCb9mZlHoHRJ4zlrdmC4pyp%2B2zZjCTXVVVFvJS6Ke216g%3D%3D\"}]}\r\ncf-ray: a141044a6d6e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24984,"size_decoded":25618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7bd85693bd4c6da5f612f785afb8de73","sha1":"0ce6ecc58dff55e1b61af0b6168cda3bd392fc00","sha256":"92497222e97d4f34bdb036bef4d8e2b24f01f49f0c9ec7c417bb4438bba717a7","sha512":"c4f385a9efbe52c7bc6eeb7fb78680d1319e69fa1265db8bf730ce0ca1edd5e477508e11f971084130c9ef52fb9bf3332ec882c862b2183cfe0b94faa9561dcf","ssdeep":"384:iGkEqyzckbAPMLvFiiQiz6ZZSlmsZhWJJyJwKCOj91x7EdojuDnbI:+NkMPUvHQizoSlNZhWJU1COj91xQOuY","tlshash":"60b2e1717dfda71a0c0d68ec1bc41a2e4dad184dcac9b460e43cf3e589711220ba722f","first_seen":"2026-06-11T16:29:30.481618Z","last_seen":"2026-07-02T14:25:44.125379Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/itech.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.321Z","timestamp":1782862834321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/itech.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBqDpgde9Pi2ZBz2GPesGzlNGKWl3jfh%2BB8CFslBxDQGpy5mdyd1A91TFH4tT4uki2AMWZoM2bdXhfQGu62NU2oYlWP1Gqe2HAO%2BxHU1KJ2xyJJ%2B1HDLrWFpj1ZlLQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a8da932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8325,"size_decoded":3808,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"37b48b1ab7341e74566813042531fe3d","sha1":"39417b326f1d1170d5a4f4a40470f69ab0c7b5d2","sha256":"3c559199758536a29f74510194ab97dbf746df8d1e765a5b4463c0b48e42e38a","sha512":"ec946a31713094cdb1bb0fb05da10ae5bc4aa513705ee8556094de78beca4bdfbe15428e4806341d2125d68db2f028dd41eff6410abf1d4c33b6707ae9dba730","ssdeep":"192:nShD/u/vXqN4PHB7dgtWq2sk0uFSfnGfl:q/u/vZhcWqWFWyl","tlshash":"930296d463f4a3d4e00af7e846a958317e6229fa7f51d405b79e5ea5db1008c4ccacd3","first_seen":"2026-06-11T16:29:30.465987Z","last_seen":"2026-07-02T14:25:44.104426Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0v0ixs97.v7n5.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.454Z","timestamp":1782862833454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0v0ixs97.v7n5.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocZ5y6D7njKihN1cQiOY6FdhKedkyL54Fr7Dts%2B6FU0wJK69tbBbmSQcqTKPdum5G2sWxpx5GlbyR3q%2FTzUHErxJoGr837VyLNinIP%2FaFOe%2BCO%2Fda%2Bov6O3EXauLvg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044519ed32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108049,"size_decoded":42772,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33805)","md5":"95ef99c841282f013e4d316bdbf10391","sha1":"f80792622b31b0dd0d1e74be890cd66f97e0d423","sha256":"7235294725f74bc429f63b3c0547001aa7e7e3f3d41af140d53b973f5e2d9368","sha512":"8a0be5bb197316d7444f9b8f3a62d528e5a286c8cddf782fb8bd0ea1fcf5c488c7d422dca571d7d0efc18eb47b3ef33e19aad8b9c097396fbbebf3d80388d481","ssdeep":"3072:yXi31G2FJlN+XTGKDXKBGchpLjdLWVwNrJqhWq15014BWiJLe:yXi31G2FrIhz15G6WiQ","tlshash":"dab37dea7342b435836b805e416f8506b23e2d64580e0c19f2b9d8dd39b4949d2fbf7a","first_seen":"2026-06-08T19:33:12.050394Z","last_seen":"2026-07-02T14:25:44.108999Z","times_seen":470,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/favicons/mainDSGN.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.868Z","timestamp":1782862833868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/favicons/mainDSGN.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfouO6vpqy0e%2FxXJ2NphWiyr2fsYD84pj5J%2FcKGk2EtfHfkfkCmmBdrkcce4nvTzdDxe3KAQTc42V00HyXwYcWFdO49LDgPnJOjorVFxixno44DcMUic5I8r53S4EA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410447af6932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3381,"size_decoded":2301,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"85832dd14b68f7c185518b9cae58dc90","sha1":"44e6994187000a898e560adedd361312cf4bbb72","sha256":"10e29cdd99c910ab70fe5f32761698fdd78b1d3b9b7e7285b111d0e31e1b4011","sha512":"815b88cd18486371daca030e646adca4ad91a1bf7ce7a3c365cc9ea39c3d6cf5a6cddc311c3dccaf18f131f83d7aaeae18a18f4023e7a898e16142ad00da8b4b","ssdeep":"","tlshash":"30615199d7eab9ece205e3f48b1684347ba224ab6621c1ad37cc6d82ef4544c04d34e3","first_seen":"2026-06-08T19:33:12.024795Z","last_seen":"2026-07-02T14:25:44.050255Z","times_seen":469,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/promo_bg.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.425Z","timestamp":1782862834425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/promo_bg.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3344\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JnBNVsVngmklyK7RfnTE0n5QBka78y%2Bv9fRves6Z%2Fmh0No8SIpdcJWSbvfNVwsYHN5gld30FJESNYYhzx4Gn7QRxbr9CaBxJUT1aC758ai0Ay%2BmvgRq%2Bihu62tw%2Bw%3D%3D\"}]}\r\ncf-ray: a141044b2ecf32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3344,"size_decoded":3983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 644x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"83c101d01e491436472d8628242a86bf","sha1":"2560c27721ff67d971fb4f83ccaaf41f859dfcce","sha256":"684e62bf3c2ee72f52b284c19c85ff006d79ccba830841ee83c47e29c3165e1a","sha512":"e3f141a3e8567e645956ffc902cf86cfc38272aeaefa4dac929b18ac19e5ac6715a572071a1c4d7e59bf5f6d0e87ea1da15f12f36369a37aceb1d987d6ec5880","ssdeep":"","tlshash":"09611b1850d9039bdf681ca64cfdc5cc16b8cd6ba8367d2531b50782ce970ab66d9154","first_seen":"2026-06-11T16:29:30.508058Z","last_seen":"2026-07-02T14:25:44.052156Z","times_seen":255,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/news/bg/soulja_boy_signs.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.463Z","timestamp":1782862834463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/news/bg/soulja_boy_signs.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 218156\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LoJWjFLSbL9xQXYWltUpSHSB2SU9FYcxNopYlZ8P2B2NGZJSEitdHCCYCzHrabPKG3obIElp9lnmeWzbsdXUgJLyFsa5KWyW%2B276gqdU%2BQEiKkB%2BE3Ttno2mYTr9NQ%3D%3D\"}]}\r\ncf-ray: a141044b6f4432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218156,"size_decoded":218793,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a13d510af36c4c6c4392d64ba20a53a2","sha1":"8201109eef3dd5e08ae7b5c1ec9a14f28a0e0aa3","sha256":"e161c9b5e5d6f57f428cde068a84a0c98661c5653da55be0e729a6146f3f785b","sha512":"38c5b0c16388d407fd0f7a0c71bb54b2f81a87c8f7449e55529b06f6bf537a8849f93e30819e3ca5fff164ddddcf6db3bdecdbf7d4da94f220b7e3a158a10a43","ssdeep":"6144:fnNZrHZ6LCwtOKTn+Zf3cr6K+E3aov4OBqfgS4Lff:LHZi5YKTnY0uEKCqfp4Lff","tlshash":"96242390ab0c7668f41f793d8d00944aac8d3ad827fde70bbec721715b91a9507a3387","first_seen":"2026-06-11T16:29:30.368321Z","last_seen":"2026-07-02T14:25:44.090023Z","times_seen":255,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.701Z","timestamp":1782862833701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Jun 2026 23:40:33 GMT\r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-07-02T16:26:03.750109Z","times_seen":18481,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":49,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/feedback/1877471.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.302Z","timestamp":1782862834302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/feedback/1877471.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117186\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jpr5iEQxx131XpV17VdpOD%2Bm9z43DWa2X%2B7P%2B42jYO0xfXgnc4TRV4ZDAXCzKO3IDz8gMdIQzqW%2FYOkVB1WM8qe78CByYVLvNlNxHYnvSYXg0NFgyV8afiUfrthoXA%3D%3D\"}]}\r\ncf-ray: a141044a6d5b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117186,"size_decoded":117825,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1017x1516, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"988ce044a2c9927c7345499bb65c9e27","sha1":"e28866f85257817a29bb9c5aa06bb93e0bfa3fdd","sha256":"105fa93f108b376a24ae7acbd2690553d348b6fa45c4773d90483306275c561c","sha512":"781f9c20b6d543e35fa46dc7440792fc40fea11687eac5d5ba886a23ecee9f2fee0e9fe2386773477e144b8626e97d39beb841e9129e1cd691c6c1f07a872b7c","ssdeep":"3072:zrdF0OImj0txWLUSqIwVeLNr9252M3/ID2:zTc8LSIhcxn","tlshash":"f0b302abf63935c0b4071a77489e216e1d74c2ea8cd277096c2cf97b98a09ec1d13b1d","first_seen":"2026-06-11T16:29:30.344843Z","last_seen":"2026-07-02T14:25:44.087911Z","times_seen":255,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/06jljm--ci~tu.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.448Z","timestamp":1782862833448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/06jljm--ci~tu.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XY6IfNxI5DInL2qbkMiXa5zXIzwcDOwje6GwTlQ7yBzvwkjeD%2BY2K8lgZEYeUq%2Bk0zDpDuzQvewuJ%2FxRMO06t2h%2B6K5qKFf5Z1Ve2wgw4pm4pQMLHCH8vvflC4hNDw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044509d832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5218,"size_decoded":2625,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5218), with no line terminators","md5":"aedfeefa1e80779099b9587ea3b1db29","sha1":"6a48447697ef6c01db549d36c6e38f1d20060ced","sha256":"1f315feaa50045554919b51284afb4ac2967751c6f67f84fe41687a3f01c55f8","sha512":"db2350c028befd1718dc036246f4541da89160807ba1159f058fcdf8d99e885a6b0eb8a266f3a7d35c64ce5938a06ebdf6b3a08a252b94c0b5e6ecf3710ed20b","ssdeep":"96:UXsY3Gv2/EP3DwgZA4b/WMJYBSaWHn5GdYLIa7sbc3DXTNDXTrv2P:UX33h8PDwgZNWMJYBbWo/a7sbc3DZDGP","tlshash":"0eb1c7b776c6fc70415685509837834bba182e37309eb0d497eaccda327ce4a85d1f9a","first_seen":"2026-05-18T06:46:56.921829Z","last_seen":"2026-07-02T14:25:44.10248Z","times_seen":473,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/gb.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.310Z","timestamp":1782862834310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/gb.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiPRrrcFeRoVYiGtUMA6eN7oDadceDWpBiUQfJn2A%2BZH2n1bgWEfhTwvRCq7WCyNRwPbZZOvNazkDxV7tyo2GAOdy0Kela9hJFmijOyMdPeAEwWL4bn2tGsa5fYHag%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a7d7432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183,"size_decoded":1307,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-02T16:29:01.129862Z","times_seen":11375,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/main_banner.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.405Z","timestamp":1782862834405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/main_banner.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/090a6r7kb8eqn.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 247446\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5XX6N2kAhUwS2%2B9AJsYZuXDPR9%2BQWAypir%2BVhpkkseMmLuPvW1eALFiU0bRvOmVeYndETgB0xM1KarqzlUnOcFnavf4ylj3aC4WphSGR8hLhvx9kFNh6pIlbMBvPg%3D%3D\"}]}\r\ncf-ray: a141044b0e8a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247446,"size_decoded":248083,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2328x1120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42021d65c9c0715b21a1d32e6ccac73e","sha1":"2c708a7315dc9cb1b4de1dcc07ad2a204584ce7a","sha256":"b66c82fbab4dbb067cfd9b5c2d1bcb75a7967b22101bd3c3b185affc1ddcb70a","sha512":"ee91dcdde5201f1c0477bf2f943a9ff1030219694da8fc68098b0d12e29f3f537f689ef02efce952f9a278c18e36c9d319b7d6cdd29888805e714653411f7ca0","ssdeep":"6144:FOD6Mem/6xo4Ys8DqzrSaB3C2C4JEOL9MxwEALaN6Gm:Vo/6Sy8DqzrSaJC/47aA2N","tlshash":"b63423bf3258491ffcd0f8f5e31bab2d57a508e4a5819c35bbe8574297e0a3ae10811d","first_seen":"2026-06-11T16:29:30.424317Z","last_seen":"2026-07-02T14:25:44.058897Z","times_seen":255,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/it.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.642Z","timestamp":1782862834642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/it.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uFBM9RP5Gkehh4dSS96%2BNiKYbiLwNBLA1VnFICLBk8lJYA9OEwnSTX5wvGnXah%2Ff5e98Wf8hHeq65UN43oIgjwRJkhld4b5j%2BfnH9NIVJxP5bTor8t%2FvsYizUYDgg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c892f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":828,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4d4f20f2f1c88447480002bbf675404a","sha1":"e4a918db17e02d130c9733d7457211389b459535","sha256":"41b974254f3dd5b0853af7585c0417998a1ffa52e97e000fe2af3eee2c916d57","sha512":"04e180d7684ab9fefd920a74433c7fdea73380c5ec2588d6174ea6c14a20bdf1ebaf250158977863fd79051cc5012e5da4b9453f88998262b5cdc1672810ad79","ssdeep":"","tlshash":"e7d02b9dd07de0c448229bb03e9e31c142962327364500daf04b271861cc3ef7e41f04","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-02T16:21:32.800463Z","times_seen":11125,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/trustwallet_bg_in.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.275Z","timestamp":1782862834275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/trustwallet_bg_in.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60396\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlJzJUNwb2%2FxLCc7JRtnRtRVGqXiyCrHMB6J0q%2BGZR1w%2B2VeoZmEaqtCP%2FSzUxUzCWTE1TOuNGXxjf86K%2FswVqY7uw%2FPy%2FjKukDqjo6y2%2Fv20wasZdgAYLgeX7zfdQ%3D%3D\"}]}\r\ncf-ray: a141044a3cc032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60396,"size_decoded":61042,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5818a4bd4a5034e2508ced43e9c6e3d4","sha1":"ed386aa5a8bd75dde86d0bed05a88a942c34ffe8","sha256":"574a990123bd97e8a0c7a6d9c1a1dc55e23e9bda00ba65a6bbc669395355d2e6","sha512":"c07d6472c5f44c4c6820dfa7c006d4e869387f1957a5f8d834192ed7ecaee6b751e4e1eb54d0ee62b7e941ebf4c8687ab0a71aa238847fb89a774b9e2b490331","ssdeep":"1536:2S/KE4krLaLscwaj8YEsFGbvNapVNCiedzRaT:FL48aLsRqUxMheL4","tlshash":"e7430141b8ded2a3f09a92d9415d8c5bab3ff9ac4b23fbf025491154964cbc092c43eb","first_seen":"2026-06-11T16:29:30.337999Z","last_seen":"2026-07-02T14:25:44.053751Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/about_bg1.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.421Z","timestamp":1782862834421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/about_bg1.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144080\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FdNg9hGdAUSFtKc2TS%2Bjfln7JycwQX%2Fdb7oaR1wQ5sb%2F82nYJIKD1oC6JyBsFJQVlELlFUxpHuD70LpbPvQsu0ngUZZcV4NuPCsgkHCfTZRqVWie9F3BOErNZ1YpA%3D%3D\"}]}\r\ncf-ray: a141044b2eba32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144080,"size_decoded":144719,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14d7d8959bd2556af2cfa71fe2d03552","sha1":"b1ce9ac92b44e6ddcf2e3dc8b5dd976115af9262","sha256":"25e0e3c67a035c74cd59768485bf3fb31d6b87647e564e06d370d202ea804522","sha512":"f2487ba16b9887e294510bfda9eb6fd3716739279ebb23c517bfe01b9382db38c7b116a716792904eb00b85e46546053823613dd757e854a5625ed62cddb3b43","ssdeep":"3072:lKTdSL592GZYo0Rs13KD8F4M0qEUHtxBLGR:3LjfZH0Rs13KD8fxBSR","tlshash":"53e3013d87758733dc95e831c992f68f8e2038cb2564529ebe0ed93054be4ee5b9580e","first_seen":"2026-06-11T16:29:30.340975Z","last_seen":"2026-07-02T14:25:44.046346Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/exclusive_bg_left.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.448Z","timestamp":1782862834448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/exclusive_bg_left.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0tjlo5.08~sm_.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 270064\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xlsfkvQ%2FWTReaDRHETQXkhNFsbG0u%2FTT%2Fi%2B5T%2B1%2FW6k%2FEiR6%2Bv2ZU0e898rwU5j3P5UbD75TI29e3tApKkUN7M2ceRgpmkhqtWTEKg%2BOcI4pT84lZPYgJD5pqnedg%3D%3D\"}]}\r\ncf-ray: a141044b4f1232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270064,"size_decoded":270713,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aead9187f9cbdfddc5ca171d47639172","sha1":"3e9014afeaefc3c74cb2ca2537a621a4678daea9","sha256":"6b9196b9638b9f0fd035f1db17bfcbf4fe56a695b1b75611b9ef589b79e0d2e8","sha512":"6fea944583124b5314053c85e1612d64aa025e3867236d097e7a67b52d877aceda91d32cb725cd24a96d5ecf7ff19b0b3149c003f353e97870c209320522c09b","ssdeep":"6144:D+O8bHNa/794UDGmGgLC41aH2sBdzQUVak2rZPVFvJza:D+FRaabmDLZ12d729PVPu","tlshash":"7a44231b46117598dcff5db540a38b071e73008ec65ae8269e182dfc5a656e0cbdc8be","first_seen":"2026-06-11T16:29:30.401181Z","last_seen":"2026-07-02T14:25:44.073677Z","times_seen":255,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/tr.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.643Z","timestamp":1782862834643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/tr.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pOYDKmCyzxkP0kgM7zpTy1wkWxYd2qHWSJ8NPnOfNE6oLP0AECTqA8ypHZRGQP3hrpzLgkamx%2B5MySCh1aS%2BQKC4rQ%2Fr19S9Ybz%2F%2Blz8v99qnF4rRZ%2FqFsdIRU%2F5Q%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c893732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":984,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"5c1ddcf25e62845a09ddaedb534eb028","sha1":"38d813431621d223dbd2bee482a0beca2eb6f087","sha256":"f750c5329bd8315e6575d5f357ca9955468a15321bcb3c7f74065b2ca6abc6ed","sha512":"67270541fccf6a0b81169c4bdeffb48a593939f42ccb8fdbe8d0fa3953f3b4bf80fd66aed8d086990d62b8684d1e15fde720137450622d8e701ad002ed9925b2","ssdeep":"","tlshash":"8ff08b848bf4a4c018955ef8ee6ff4d2674ca6baa7001095f242ab04e0cd8dd664ac14","first_seen":"2023-05-08T01:55:44Z","last_seen":"2026-07-02T14:25:44.046888Z","times_seen":813,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/blockchain_com_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.438Z","timestamp":1782862834438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/blockchain_com_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/090a6r7kb8eqn.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6518vXkNAwOKDXQXi1N7MspEF47a9We0nLrx2tUUlQBTxHsbnbEYUAHVDpXb%2FFAMkJ31YlD62P2mszGsCijUumxWYjG%2Fj1m832gAs3W%2Bp%2FR%2BYO7Web2CJ3eLm2kNQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044b3ef532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1075,"size_decoded":1170,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"ff97edbef47e18dc68ee4076de443ab5","sha1":"ff442cd78e77df89ae19e6c77e2e6ca574aad043","sha256":"1f4b9adc8ad5ec895c593bc45b06971efa3f1873f87ac0974b3a5f150313becd","sha512":"aeb8c2f9f7bc40548838a0afd51a7f3152c529ca2752fdaa7181a1d013b02db1841e370f48eb6776a5ba9e2dcedf9179a0bd63a1b8722faeaa8e143a95c24ee8","ssdeep":"","tlshash":"921112fd62f891b08e006f40af19952a9f5121d74f54003cfaec6f487f4c5ab5d529c4","first_seen":"2026-06-11T16:29:30.325203Z","last_seen":"2026-07-02T14:25:44.111175Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/news/bg/deposit_bank_card.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.460Z","timestamp":1782862834460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/news/bg/deposit_bank_card.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 234480\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRBxeLfmloXke6zLfz%2BUYywVIX3%2B%2BtXPjoWbhcpHE93m1nqyjtHDgso38ldKIUOsclpoIb4gDcMxn6CUrJ0nNW1g9g5XGCiEYaKkStaZbPsNyDKY0LdR%2BXnHu35X%2BQ%3D%3D\"}]}\r\ncf-ray: a141044b6f3b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234480,"size_decoded":235121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b0fe231a1f56284a3a4c7f220466698","sha1":"33ebbe9b7d338331c0538dfef98d4399c184b368","sha256":"b8bb22422f587abc0c8a440b8f682731ccd99f872659cef4d4189d515fe35e68","sha512":"5229c2ee1c8c2cf80dea6adb965b924856734d13dfb441807ec4d45240a62eaf73e936cbcca8101c1343f25664de3686b519f054560857d18400f43211ac3df1","ssdeep":"6144:xw+rAvrOKHT1WUzgR2bfWjtv+dAYtBBYP+N67By77KG:xDrAvrOKHAUEkfwtvqAYpQs6NyCG","tlshash":"4934238f569e6b8ed5a94eb5c1466394c3d0173ba3ae432db9f55723af0600c2d92324","first_seen":"2026-06-11T16:29:30.51015Z","last_seen":"2026-07-02T14:25:44.117086Z","times_seen":254,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/turbopack-0ecgschtaudos.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.437Z","timestamp":1782862833437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0ecgschtaudos.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoFmolsE5pTzBhTiwnp92QIN0OA5OHVYGMPgowFjdRaTWsTK3HmdTIlKyZVqvNVUjdW2ncfwix8UskmDcOAkZwAe6BjU0Xzc8cdJQKPBnVIFkiWHhzhnrzYUMbZLYg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444f9b232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10581,"size_decoded":4990,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10581), with no line terminators","md5":"6ba2cb91d34ea9e9369784ebe9af4389","sha1":"384f6cf4bd44ee8abdfd3c2b3239164fd7d59351","sha256":"54a5acf97d9eae9f3ec52b7fa09d3b076f41747ab972ea5c3a84d6ac1cc71439","sha512":"c7e178c33990e900f1d7720cea3451698680da7947b01a43114f47f2ed2c308964cd3f024a682e9937d87485ac64f3e708048a435e3bbbdaeef1641c78a0dc62","ssdeep":"192:z4gMFB683Esgdo2YE0hBG/lhjTNWn+S3sBT4fCT3cXXqroor2:z4gMFVgOQ/lHW+ssqCTMKA","tlshash":"8622c8da37a6f07343af94e7906b4004f17d84a9145d141cd3aca8eb2c394ae85e7f76","first_seen":"2026-06-08T19:33:12.036767Z","last_seen":"2026-07-02T14:25:44.113772Z","times_seen":471,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/03fg85j1c363f.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.453Z","timestamp":1782862833453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/03fg85j1c363f.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYDiFYlREQduVT1%2FNn6cBR9%2Ft19RyS8WXEnh6M7%2BCRp86ouP%2Fs%2FYmVOeyVdzqQycroIOUi3vYKChoT%2B%2BLM1rFjYzNoeDen3DPtwUTYsEW1oByz%2FBMz952fievWx5Ag%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044519e932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667746,"size_decoded":266726,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"05cda99838f3df07eb438b054ce7d2ae","sha1":"5d7ba1308daf2a223c780b365a7123a12d2a56af","sha256":"72a35adf797fe33e0548ce20a161ab102a616803284bfb50f3755bcf8a8ae9b3","sha512":"b5a255650f22adcc0c518c24a86d52d2ac36bc52845302fa088afff62f41fd3467d822b72ca1f20045b35c4f9e9abbb7754bffe1d4355563a6cf60984e3348ae","ssdeep":"12288:yibu0iI0QXDQnq5u0FxIijiw9LUoXQM+M0qizOVNkUoReh+YoJLPP8v0hxQ0zPV5:tbDiX+NRv8tB","tlshash":"fae45c696025213897956090c15b3446efb1682f2dc944acf7b8ecef57b4e8e332af71","first_seen":"2026-06-08T19:33:12.046227Z","last_seen":"2026-07-02T14:25:44.093553Z","times_seen":470,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fragment+Mono\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.703Z","timestamp":1782862833703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Fragment+Mono\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Jun 2026 23:40:33 GMT\r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6093,"size_decoded":1472,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ce2aa8e898f250b7c0242ab9077f31dd","sha1":"d002f148d6d3f9736e9014bc0d6555b0fe0d3613","sha256":"8aed4ac843c06ce642e2cad43271e538c73868098e3b5d20f8f339ded465332f","sha512":"4104bae1e0ea8a5db1b0cd1699f68cbcf332c291476e81506501e9b04c97a573d3042b0339f07226ed5bb1d5f4a15967f917dd5592f57d766b6dd587825fb44b","ssdeep":"96:lOEabOEapJc+uEOEa7ONDYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGX:68J05ywfydyGy63gy/yFVyR73xpmj3UQ","tlshash":"89c10c92046f9004ea431cd627cf3e32ad8e51556082e57daffe2ccaacdbd221324b4d","first_seen":"2026-06-08T19:33:12.052545Z","last_seen":"2026-07-02T14:25:44.109499Z","times_seen":467,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/top_block_partners.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.255Z","timestamp":1782862834255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/top_block_partners.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XUkDgIZpmgmsSAe3THG%2B1LsEgfqh%2F3X40bMLIAVjixh5Rt8O6Np1rKNh1bDhyDOyHlYE9BOQ5c9Jr3pGo7oprFZpP7EjNKd8JEtP%2BntQqREn2ngEVhRITNipufJEQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a1c8832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17717,"size_decoded":7362,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6084c40ee224566f3461c7ddb7fc93aa","sha1":"207affc69d2774609ed581b8bd4a8817cfcf3c8a","sha256":"afcb08887e9a332c3b4dcec9316bd4ebffed6706cca6f70b7eecde5051fd292b","sha512":"4555a84c5a3810d1e0fdafcb2f8370b8671e7eff8f548c5f6733cf67bc77891c95e9da970ba8f653d95b7f6bfd5bf1b89868c911157bb8e4fbafbb5dc52dbb45","ssdeep":"384:3mHQD+XVmeF2dDTXOzgmtu6zh7bJ4cerYVu+hg9rprN9daIp/VVYSpp:h+XzUXOzgmtxxF4cerYsHzDp/VVYSX","tlshash":"2082e6c927b893f8f961e2feda3a919ab91727ed36444c35c72d9d04eb8105d0d0b8c2","first_seen":"2026-06-11T16:29:30.388742Z","last_seen":"2026-07-02T14:25:44.112204Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/09ax8xf9js1~x.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.450Z","timestamp":1782862833450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/09ax8xf9js1~x.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktVQr9mfFdyGAOR%2FC2iwOpKpHGMQ%2Fb2k%2F0WGA5futglgjHe3vavJi5QQe4Mu%2BUZ7ryBTaI9O1rFV60Qa%2Fwis%2F4XhbABQgCMM1%2Brye%2FbqHgitjHPVb4bUgVWLSRlKiw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044519df32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51806,"size_decoded":18264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51748), with no line terminators","md5":"fc3cc5e6fa80c4b761ca26432d9cd2d6","sha1":"c6ad5387c26620d5e52727cc5220773c26483332","sha256":"aa685f4dee788f3a7174992fd011ff4ab7412aeffaf0b631f750fe536fa2253e","sha512":"7627818dd28ea6e8deccefeae7d39da2ad471e6853267bf6d1a644481d42255f85a11b804662e276f3431f09ecc1ab1891c098d0ae60d0bd6fa3f74ced315300","ssdeep":"768:e8ehunucesw7F7sKaMrxwkXRoOiRLhFHM8XzR46XOUYpJ7NzWxaHLPMbtJpy6xkh:e8ehsuuiQKa0oHMUR35kv","tlshash":"e733e9e2f1d4e2d9e4061b80f81f9808e52e39bdde45ddb466bcaca11f204d8b985fc5","first_seen":"2026-06-30T23:31:18.320187Z","last_seen":"2026-07-01T20:13:47.849834Z","times_seen":55,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/support_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.313Z","timestamp":1782862834313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/support_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qH%2FhWJ01Z0fyzaunXe8xL3uj6PZkrlBHT3IJH2gNZx%2B2AmodEvslqzN5Lb2I5UWd7Kc10CM1tJ%2B%2FZuDByCLoECiEzfnFDroo3TbnsH6kYBZuhWR4%2F5EwZFcOEuYcQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a7d8132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6555,"size_decoded":3836,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"74da0a988581d3182c97b5b8ed18a838","sha1":"89e81f812109330fe50e025e71355631acf9aa04","sha256":"0d905bcdd2da3e9c6ad16d05095188c2cdb5de7789ccb58f8d7d57b2815a1efb","sha512":"d08d39bb223d344b8b4f7e475a0f7a0a3b69027231c08fa551a3fb411fd87f224c3cf21191c4fd6a0eb79066758fff3b67d90d29ec87017bf27991ebf982b1c9","ssdeep":"192:ZymxxpT3BpuhVymoA8TztZJBNoH9LyAnF6f8S:smxbeuVFXNodOA0J","tlshash":"06d1c8dc1fb40af4e882a3ebef2210887f0264f765864a35e32d8f4636224adc845dc5","first_seen":"2026-06-11T16:29:30.326879Z","last_seen":"2026-07-02T14:25:44.103918Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/es.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.637Z","timestamp":1782862834637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/es.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HS5m2ZCrMYXUhVkd84Y4gItEaJlf1B%2FPWhBGlnb%2BU1W9A08EEzZ8G5mto8uLGfwxSof53gZi8s%2F5gg1RjKmjV8D5DGxTwyVMNjGwyadNqWMKBm4pSiHROyEbD0WgNg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c792232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":983,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a8224968196d0dd6d84e44c98093c280","sha1":"882b8a579de32e24e13e999b411abd814071cc2a","sha256":"f8cf69e4d0d285ff8e9be18f239b65e38fe1a235086a8daae53b1baa1e7a3557","sha512":"096da45f1e9c9fd020364a51f387110fe6b08969d607a52acd6acf7f01215e15ebb88c93484b7aef1392143f744ca491f8862151d5c4850ec8f7b9d4d419e870","ssdeep":"","tlshash":"bcf049c5743db18388098b742d6e70e6408e721b554814dd70079b28a3aa3df7ac2f6c","first_seen":"2023-04-17T16:03:39Z","last_seen":"2026-07-02T16:29:01.15206Z","times_seen":11118,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/090a6r7kb8eqn.css","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.422Z","timestamp":1782862833422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/090a6r7kb8eqn.css HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8MvHP7IckM7SsE3UFez8wUrCldnJiVpGTsx%2FMltHmAr35nt4etOKFyPWB2vW4b2VKHThus4u4tQIkSm%2BK76r5HC5ib5FDvKYn1KEDr4nzEvRNyWpS6S%2FxFi2sO7Gw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444e97832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79308,"size_decoded":11364,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30091)","md5":"6325d92868fb3bc97f29a3668b4bf291","sha1":"0178ef58fe1afd80afa9790ebafd61b806530f59","sha256":"6d36d452b2dec5e9c5df5c4578806b470fa08b07970510de0cceb6fdfd3835b0","sha512":"546de16adb202ffe9f329d8edbd89ed4d66274c2670cd024f8015bd4a1b77ec98f0d4c0b710ae8a7344cfba8d3da165a46f798eab483296638027c3f61ea79e0","ssdeep":"768:FC46pj5uEvGLesaFORUDAKqS+ESoDUp5LlwF14IrjHXZ:z1yZukDU5JGp","tlshash":"b573dd6d51b447bfe41db011f2c468188fa7eac6e9a24be5480c69a742c2ef115f3b37","first_seen":"2026-06-08T19:33:12.056103Z","last_seen":"2026-07-02T14:25:44.104943Z","times_seen":471,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0514pcijmsasy.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.439Z","timestamp":1782862833439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0514pcijmsasy.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH99pwvseRoillS2CEc2lNEHOu6HfnUgy2wCSA0inJXS%2FuCOcdq7D8mOPHycoVdnGR4h8bHUjqj%2FCPbL%2Bil9NcEmuGQgozAfzJe0TQTasL1WPUtI8ORlEvAYhJI40w%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044509bc32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9691,"size_decoded":4758,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9691), with no line terminators","md5":"ed3d466c2d251d739ca14bdd80caf061","sha1":"38eabd2cd88e7589c09720b23fe926fb69e7bf2b","sha256":"290816770359c2131dc4f5bced87b4de8567a75148300b6d38673561b0e80fa3","sha512":"b56e083f791bc181b92e28bdedb61e18924c835f4b3a50de7cbb37862ac0dc18305a4621ecf1f2ab5615551286ef133723ee259929a8db034d10c06dd5f4d370","ssdeep":"192:k21OmPkG5HtOCdVC8+BrTvk+0tDq1ZT643MN3WYtdUo2RBRmuk:J1ZAEKcDqf23Tso2RBRmuk","tlshash":"8c122a94f1a07936035746a3a1ff0702733a89595c1f84ecb1b888882b71e8d11bff9e","first_seen":"2026-06-08T19:33:12.061464Z","last_seen":"2026-07-02T14:25:44.12442Z","times_seen":471,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/feedback/13924686.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.298Z","timestamp":1782862834298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/feedback/13924686.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 119786\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phlAJPsIELwJp1cFVkrL4vtKeiHOJu1W7jrxIb%2BwEKzaJwj0yAyr7oZgFYgqdoyd5UYY8wn5qiZVTnukeShE36GRd4Em8%2Ba46sFzXS6dg2tduPSJrZUnozrIbQLPWg%3D%3D\"}]}\r\ncf-ray: a141044a5d3b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119786,"size_decoded":120421,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0537dfd0b1e5a586aa9aa7292f36e4a1","sha1":"aa216bd36f5b0b10e550a3ad4cb98a90c43acfa2","sha256":"305593a4b0fb7e87f23a8a259ffe6c464ac7f052b8a05622092f3835f61ab98c","sha512":"4a74f6ac7450300176660e8a6ec83e75717f793ed0ebf4044626a4bc193eb744d12c1a646c8022ddc78663d974fbd777c460a224a5a86b22e6dd494e5fe39def","ssdeep":"3072:6yaFjJQN9aj9o0gW9pApzjlU5BUXm3R2DpXaMK1ENUr7:6PFjumjOVW41oe8RiKzCNy","tlshash":"60c3124d38609fa0376b9e275f3b4d119c5358fa7cf18cb02f1699e236a5b9c850d6c2","first_seen":"2026-06-11T16:29:30.384557Z","last_seen":"2026-07-02T14:25:44.121475Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/get_bg.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.422Z","timestamp":1782862834422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/get_bg.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2726\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDxcG3P9IQQ6w%2FGazaBIis%2B0za5k0rfovIUT6DLbZ%2BIbtSD4WbMWdQmnqv8eDjKxxoF%2FtEjpnsJq8E%2BBUutACbUtjZqb%2BuCaBbdmMpqc2V39yiY7kevdhNsPRomkrA%3D%3D\"}]}\r\ncf-ray: a141044b2ec032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2726,"size_decoded":3367,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fd0dde002fc5f4487d628c3b990d349","sha1":"a702d4aa2f28b5031eeed12eff39e38bdaecd9e1","sha256":"2fdee3248360d78fc8bacf24ab3a972d4bc82d4d4178459b97a8baaa9691dd60","sha512":"1ecf982c315e42c561420d89ccadb440aaa2c846f0247c8936cf720705f31ce34b19b0da28c4966ba4de3ecd3e30a8923a6fd79ce82d8f2b9e150376c30ad4aa","ssdeep":"","tlshash":"00512ba15b0c191cf894853ea91d4c06bbc8e0d139e1313a74f5185b76954e93cfa16b","first_seen":"2026-06-11T16:29:30.458726Z","last_seen":"2026-07-02T14:25:44.051462Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.499Z","timestamp":1782862834499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cozywin.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:31:09 GMT\r\nexpires: Mon, 28 Jun 2027 10:31:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 220165\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-07-02T16:09:46.174323Z","times_seen":28358,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0.tq3hqv052nt.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.436Z","timestamp":1782862833436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0.tq3hqv052nt.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZEGbSRjxE67SiZVb8OmYfOeNK7zt0zX%2BlonR446%2B88MSbRSfF37NwNL%2Fcmb7GvzVJAyJ%2BmiTw916BGndYz0XaydXEpGj%2FJDv9quxDnvojOkqwsCn%2Bto1rYlFP50FQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444f9ae32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144579,"size_decoded":40642,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3dc8cb2a59489c1561ab34843f6ea999","sha1":"5af3abb3d1dbb398bb131d6cc4976c6df6113a9e","sha256":"07b5b0a411a49989495c74530e109e477f9342b2dbf476217bfff08e0be0af3e","sha512":"5b14c7c64ba184c60488cb10d5096482538946ccda7801ecdffbec8c2b2cc70394be8baf3924aa04b70b00963afff814b388e8429a9f2bf476ef3c381da6c289","ssdeep":"3072:pbPzjb93YLLBpqE2O4dwg1ZoIUtQJ0aqMuB:pbPzjb93YLLBpT2O4Og1Zit2qMuB","tlshash":"8be3e6f935d1f88207ab50a6c03f0006f22c4d77189e6860e3e5ddda756465de2b3faa","first_seen":"2026-06-08T19:33:12.034645Z","last_seen":"2026-07-02T14:25:44.083183Z","times_seen":470,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/crypto_com_bg_out.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.271Z","timestamp":1782862834271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/crypto_com_bg_out.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66668\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9fMHwI6s58BH3Jl0NnH4q9oKMoLaqaw%2BjlTp0EBHqiL%2FRdSecTA%2FR8psSJ1bpX9cCzL45kan1bhutL6WYIF4F5ibh8FiGK1204Zwb%2FBUGXcxBDBCCl5%2FGQW8A52Vw%3D%3D\"}]}\r\ncf-ray: a141044a3cb232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66668,"size_decoded":67310,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f83bca3a53d9ec69b96a60f4914953f","sha1":"2154887948793dcad22c53d341427a3ddb4a8fc8","sha256":"5259866451d6e67d7a2741eb51895fd85bfde6a784fe9e65e4ad17a645a14e0c","sha512":"f266d81908e488e197bf4f5e8995113f4b1bee0eb5b4a1cc521dd94309cb27c6e6ecd8d0c720d6588eeb151f13b525083cbbee6f09f23acdeb5c41526c01625d","ssdeep":"1536:JjjbWA9pz9EB+u0/aEP0uRcmd7/eKxJs6FJo8NfZoJ40:Nbdz9EAhSE8uRvd7/fLFJBFZO","tlshash":"365312616873882ce6e93b1bc5f33be3476426d4415a602ef0df6a03065e0b27d4e5f6","first_seen":"2026-06-11T16:29:30.331854Z","last_seen":"2026-07-02T14:25:44.079778Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/clover.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.290Z","timestamp":1782862834290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/clover.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lb21qsAhxKmYzM9MGK5PprrrNEmAaLiVFtOpDRplIWQ6vOuAEim70HAQJSeHgypCRr7kSID1VFhqiU7BBqxKVo4IVZayy1mZMWxUsvBpK1wqa1q%2FYbB39Fukp4E4XA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a5d0932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3043,"size_decoded":2174,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4213bb84020cec5fbfd069cd780d9c32","sha1":"96a0bd72a226d74bcb911762b044031bc350058f","sha256":"ceacd97ef39f08a350b8ca4a0cc1e627fd9376fb32bef5cd608f5dfcac9580f1","sha512":"cbde1be90f8f4a8eb53a89a0f44c95347ac5c9d1c16023cf8784f5dc57d3858261980eacabab16322b05eb05c1b636833dc6163b4b0a2416d38f7b996b02ed09","ssdeep":"","tlshash":"8151b7f4f3e4e2f1d209d7e0c6569c31bb1718f35e26c2681688ee98eb0504e849dcd8","first_seen":"2026-06-11T16:29:30.486235Z","last_seen":"2026-07-02T14:25:44.120447Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/support.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.315Z","timestamp":1782862834315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/support.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34946\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flcIkujvBjsWCXNoDvje%2F%2B3Uzrc5snVSDKBt6S0I58mUU2R5w6ZuKZQvvy%2BB7AIBfm3%2BzRaA7Qm%2Bb5O6PtBkZG2N3aQS4pZbrP8RF0VQJ3ShLNkPpVbp2acmyt9QcQ%3D%3D\"}]}\r\ncf-ray: a141044a7d8d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34946,"size_decoded":35586,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"202f2a8b798bdc5cb240937e8754db7a","sha1":"385f065b95c8a2bb6f3da5c67c5326958eb5c5fe","sha256":"03295f609d175a94ace1bb5072f01709c82893eb043a8f75b9e799a68c18d781","sha512":"d9b9cd7afc68c6ab3e08dec25b5d3a33bab5faca4ab460fff0a0411e3226c2a4b129d3c8dcaa882c0e629e77695cb9cdb183b8b35b59d762609d09a14b2cef7b","ssdeep":"768:SOhFhqbBi1I+eZhbNyhsHHdci9Z6/uHA0zOsQOd0K5ROyA:SOhYBi2+eZpHHqiwcHd0AIt","tlshash":"fff201a5593ba5e1fc03d18655875eafade3043b2aed9890e321cdcf846e2d60a103d9","first_seen":"2026-06-11T16:29:30.328385Z","last_seen":"2026-07-02T14:25:44.075998Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/ssl.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.319Z","timestamp":1782862834319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/ssl.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXev8pha%2Fc1e2J1DlsRB%2BHb1bfwGfUUmmrarTjb3ZFfSDel9b%2Bc1TCBdQT5byfwnbb148PMFxzs%2BGeGlKG0855ggDoMJAFy16BWmO%2FCIjobKkHr1caXib369FdDJPw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a7da132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5759,"size_decoded":2831,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a87540537d4556d223239dc0c6c49a88","sha1":"25d10c01b2d39cb7f053412aa8229be9aef9c714","sha256":"dfda4f7d1cbf365b02cd1a31280471a6271721148a5dbeda4e90000f9f34e77c","sha512":"d4368be86e434f3d1a3bcccda8613c6e49fe8f5e32c93dc522f93e27a58b5877c9d79a8ce44e7a3c29fc7830f593e20ac81b64a2dd6e294047849764ffa15a73","ssdeep":"96:NPfADU98+OsYczGoQvcTC/qFRqZF5pP5yD8dj6BbXrnd9Gs8tYG1eMGxg:RfAwuIfzEvce/qFRqZFH5yDg6BDrnCsq","tlshash":"4ec196a0b3f5d2f4a144e7f8533d28307dab24fb1a62852d87a12ee4a55151dcce68d2","first_seen":"2026-06-11T16:29:30.464934Z","last_seen":"2026-07-02T14:25:44.077922Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/gcb.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.320Z","timestamp":1782862834320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/gcb.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBtHiG8nJYMcFNG%2BUGyyp2jLyNnxjtnLBUex0cLk%2BdmHuR0PKzo2Kmr9usnzPwLk%2FdhBHNKtyMOELQ5f%2FG%2F67JjQlDFWmfbiap8lCAH2BIqZAMVZMjlxC4iPdAixvA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a8da632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17387,"size_decoded":5527,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"3ab213188845bd9dc6affb0063e46882","sha1":"a202aadc312b2e1dda1ce62c2e306d54c00df38e","sha256":"5084d91da49963d53fe53102127101bcb9b146611896ac7c59caf25099ccca87","sha512":"321675bfcd9ec0d8e7735196270da774161c5ec86a2ece62092b012a66b9eb51cdbe318b69cd732f9bd5f93743bfb60fce81791aa0615baf96715554d1018825","ssdeep":"384:/U2I2gjDtY+kkcVTLd8JVswOpgplLmvvKU8U+kkxY0lRtodEpjzPgtSHzLL:c2BgQTVTLUswxHavKy8lIdEZjgsX","tlshash":"ed72944ad3f87288f042e3b091ea18397f775de67e12d91563ec1c66cbd500c98b98a7","first_seen":"2026-06-11T16:29:30.43945Z","last_seen":"2026-07-02T14:25:44.097743Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/card_bg.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.408Z","timestamp":1782862834408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/card_bg.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/090a6r7kb8eqn.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 111180\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioHTxIBNFqjMG8%2FH7l9lReNfGjv%2FOulEMRBwExkaTr3P%2FuMVirKUL3XQiQ2ruRjpRm7T5dOVXE0HoZ30sqk5Wp9%2FEBX%2Bhcf9FqRubd70qcUZfQR10wgiNb2WVAX%2FQA%3D%3D\"}]}\r\ncf-ray: a141044b1ea332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111180,"size_decoded":111823,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db2e3af305e77f6720659c1d01a16e85","sha1":"e30f7b5ec2d586e9c4d5b4b594051a47b390a5fa","sha256":"9cda8ca81683c230eebf0deafc4876f44a6c72cbbcbdb1c32ff7171d55c5a24a","sha512":"f4798d12c1fd354ad515123aa0b25f69c0abba4d5e6a3196bac3320f75c1537844b750163a0267f22862a7b618c91e7f8727bdebfe2b572409c702c881f12b35","ssdeep":"3072:pY+41CSOfT1eLc+GQCxPdMt4VOCzBWVHj0vfgo:K1HCTeViswzBcDEoo","tlshash":"62b312403c437e4789cf05aa7799c5cfc41a039f21567298b0639e2440a9b92aefdb7f","first_seen":"2026-06-11T16:29:30.377673Z","last_seen":"2026-07-02T14:25:44.100181Z","times_seen":255,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/stats_r.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.417Z","timestamp":1782862834417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/stats_r.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10416\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3XTiIzY4pv9Rim73gDnM8UtRSm3PTulVETKP9u9IEu5Ws52LSdry4pUF2VK6ESwTzmzPp7ZyDCddaRQFqARA0pleI0jepa2tTGPwN9vLOaoIJbjXTaY9KrpnodhRQ%3D%3D\"}]}\r\ncf-ray: a141044b1eb132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10416,"size_decoded":11046,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1148x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1aee5ce794458ed72894690fec0092c1","sha1":"3aaee33264692d25a25d94df20713990c9be70b2","sha256":"a5f6bd4de41805765c9b57607e459e944c92b584f23267623e1060bf5c076cb4","sha512":"f89f112021d3756829843f43d569fcbda0446634c1be804f7337ae9f32da23030cb65b3b41922becae3731617a85408b19b6a85ed7939c33d9d97f095e430414","ssdeep":"192:mb4n39dybzXdJEsnFevnpss4MI6bc8eTXaUBzLtqTmzHzftd7su1CrdBp:2Id233nop7HbmqGntG0sp","tlshash":"fe22b08efd75e007cb0e765ea6b023c27c612c65521e6ef8059815ee5274901cf87da9","first_seen":"2026-06-11T16:29:30.333176Z","last_seen":"2026-07-02T14:25:44.089505Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/stats_pp.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.418Z","timestamp":1782862834418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/stats_pp.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11582\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lssEMVN4LyCyQCgtBKPRGc1waE0i8vqBLbf%2B9g%2FH2rodMEnJkifGdRg0ykWkMrZiipZYne9BT6Kiarrbw%2Bqy3CaliVICVNd6vzLETeeoo2ylm%2Fvgg2sSWQCPN3LRGA%3D%3D\"}]}\r\ncf-ray: a141044b1eb532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11582,"size_decoded":12220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1148x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c48dd0edef173e4054f47407473ce867","sha1":"381dcc8a414e38c75ffb6f89a8f205e72d9b83b2","sha256":"734212c805cf0d1ad7a310ba32e45aa2aa0736180f7ec931067c204b2fa34ebd","sha512":"99f01907ffcf0e035aca03ab996f9b45685f79122060e4478556d7e9a57acb3835b7f762dc8686fea224de6f32fe39297289703e7fdfbda7876b15581b6e08ec","ssdeep":"192:wP1Ch5P0vCAsstjTA5S100x+jJXSW5OQr4YhCOo49FesgHIm57hCHG/3KwjUWO7R:acsYsZTA5S20xML5OudCSeVPIGZUWER","tlshash":"f932d0db9c45b2ac54f7926b54f65382f6d44183e6e3ff3a0ba1142bad0cc2a8004dd3","first_seen":"2026-06-11T16:29:30.418475Z","last_seen":"2026-07-02T14:25:44.04824Z","times_seen":255,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T23:40:33.073Z","timestamp":1782862833073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9wvIiL26DJUVZDMdxB1ic85NE3mEssVTtwCw3HtgLI2jsirsk1Jep69KjuCokYXOCVhSFtehlUjyDRAMkrxig2deVmh5CQB8SmNq6xpozdBcLmCsEM%2BNWckcX%2BoUg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a14104430df532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14403,"size_decoded":3509,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (14403), with no line terminators","md5":"71786073fd06388668456aae052f8199","sha1":"576e0f8693e4f5bc29fb041018a4e0610a9d7e88","sha256":"8fdd318b7f26cf6ccf36d1bb6c1cab79c822972eeda5ef782298088391a9da71","sha512":"8f904267bfbe8884426cbbb897d87cf96651a9f2a64cca627a4a47e9f928c2c4403874f44428d11fc2e4df8ba14070e841d11810f967fecd265c822e293da5db","ssdeep":"192:a5RBOBeBXUOj/ZA1g1QPYNl1z1PnvTfSpGB913M1tFz1f10M131ZocigC1xDuuAy:a5G2EOjR2QXv8vCbuu/","tlshash":"1152e01fac0aee069c35ad6e017e9e3b44cccd7b8774c9a8d29dcd8d06126b617d8d81","first_seen":"2026-06-30T23:32:44.721579Z","last_seen":"2026-06-30T23:41:03.583093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":30,"connect":1,"send":0,"wait":64,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0pui-sg~t8d6m.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.550Z","timestamp":1782862834550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0pui-sg~t8d6m.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7N9BZihVNrOTKRRiZcibzNbZ8sIroQSc6htk7yKO%2BM6886riPfLjSayO%2BwuDz74ivG1JSjJmBw4%2FF6g6Fo7%2Fp%2FfXhI%2FOWrTE69ou7qKSaOSxorV1rk%2FoGHQWYpix2g%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044bf84032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3259,"size_decoded":1822,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3239), with no line terminators","md5":"84d46429db8f13524085bf5cb4043f4e","sha1":"c8639b27a2d4c5c0ff179b54e803f38b579cff38","sha256":"d5a55ce3f19056582492201fac7b6a73fb75943a6e08c7549d08d639c1364276","sha512":"83647e3eb8526db32d31c08df7e661e8c36c3f5fb550e0edd6abf88b9eca9a1f6c52f01dbd68aaa0d69034f6c577be866362346c8c03f5c9003d9bc1f47d987a","ssdeep":"","tlshash":"8b611066524923f53f322a4c203fdc9e510ab21cc6464cf5261584bd27abf91b8a7fcd","first_seen":"2026-06-11T16:29:30.36988Z","last_seen":"2026-07-02T14:25:44.079175Z","times_seen":255,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/sigma_eurasia.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.295Z","timestamp":1782862834295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/sigma_eurasia.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6306\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhV4FvRHb2Q2lYE1XK6%2BgQI0S85fXO1EyTm43hwmrWSEAH5ssKTnqDo1uatjgmbA6MZPb6KoOYjVHgai5mWV6gzCc42EvwfaPpT%2FsCLa7m1EuCaVIC92wHKFM4fhDA%3D%3D\"}]}\r\ncf-ray: a141044a5d2932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6306,"size_decoded":6939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31a0779e7eeeaf9075e4e998388388ce","sha1":"f0f79ff9a252705eaba28f1608a706f7ecbcc3ac","sha256":"c90ee2288f068762f1d7618f7e1c8dfe0278bd94f4712a9d2fe24ed2d733daa6","sha512":"a9edc460b83634e4224bb0b3a9facf92795c8c90698ebbb1d72ff2917210f5b169903b94a308c079922d851277f482c0abc69b90c32b68a80c881482d3202e4f","ssdeep":"96:kAJKEVj9Yh8eyK1LFIc+zh1ypZXwOR5swetc+J4bMW/yWpeqoACbhV86IFj6/dNZ:tJfVBSqbZzhwpZgnkJ7xby8Fjmd4DXu","tlshash":"35d19e43920d598c74ad7dff3ac826b72114ea1041528ee68e610fb716e58c8edeef14","first_seen":"2026-06-11T16:29:30.41704Z","last_seen":"2026-07-02T14:25:44.081173Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/cn.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.648Z","timestamp":1782862834648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/cn.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAmwNZg%2BDHPrlwOfDR8AvzLW1nhcwalKkYnuOtEzAfRkyrUGqGziRPe2x8trt%2FYjlt3ow08kknbaJcjURDRH0myK4yA8jvR3JbLyZi5EWx1tVUhNmml%2FDWdNa9K9iw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c894632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":696,"size_decoded":1023,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d39728b84718665ada444d92579fadae","sha1":"11fb0d75502abe17cc325fc4c77fe0d3f507236d","sha256":"4db67ee7fc03992f7c0d6cc737441c67aac931442267bf896cd78d4c3e97ddcd","sha512":"3e0d290cd9f2b52709fe020527c4888c2a14d0f617de2ac2e4410526838f7b46df1e78cd9d15f6558cae357d8da73cba72efa824b1063dfa36e876d0661c0b88","ssdeep":"","tlshash":"1b01c09dc135e2c845ccc9987f4535ea141ab27a40b134c164c7ba58600bcfcf649a2c","first_seen":"2023-05-17T19:49:17Z","last_seen":"2026-07-02T15:26:26.209564Z","times_seen":2966,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/bottom.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.318Z","timestamp":1782862834318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/bottom.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13322\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9gz4HgFhdeSd35gw36vbaW%2FrTxq3di1b7kQT31Nwoqb4SR8DTAQ8M%2B4ghnEsjXIP16hSFiweLdR1t6XeCOrhSwfpzTgehM1HuIds4ufJesCIDFYSLclN%2FiDjbY%2Bxw%3D%3D\"}]}\r\ncf-ray: a141044a7d9b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13322,"size_decoded":13960,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc541c590c2cbf78acc4490b92b10fab","sha1":"4da2aa03a7d1b9865cc83f0785cfbd58a7fa25a5","sha256":"afb65c3b8249c16259f860330cfc595324e7034171e6e7762d1e9864c551b69b","sha512":"5e5a13d15f4867a88370eb1aa58e6e2b6223b90f6425c75d92a7f1b2b612a93075994ee91f5d7ac142b3a163c3ef434ad4c135c2e5befd33b2d438e260af985e","ssdeep":"384:Zb1r/497WNQ9Ewe76MQ1rmBHSLDp2rMHtqblWiLTgQH:B1D49CNyKQ1rm1SLDskMBhgu","tlshash":"2252cfaa63f1142e054d997e1b2a14cdd8e13ec21ffdae52b8ca1c27483752f215b322","first_seen":"2026-06-11T16:29:30.389839Z","last_seen":"2026-07-02T14:25:44.10686Z","times_seen":255,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/kr.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.647Z","timestamp":1782862834647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/kr.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTtqCf1NslQNG%2FjAlL%2F%2Bc96jbX2z4ygfHvRJasIZgXJdGHnL3i5NCGa%2BukVg0TQQZ1XU82I%2Ftn2Z03saY7CNt%2FIFSNYMtQRVAmyWI%2BLxe35Z6bRdT7b0I%2BvSxbeUHg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c894132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1457,"size_decoded":1269,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b57d2718c0f2330c0e06166d4b5fb606","sha1":"80100720aae2017e911dab7726ce4eeb73851661","sha256":"f69a22143e7948606729b9195cb0fa16993642322f9e21cd84533b28e8083ee7","sha512":"f7596cf54e8902e99fbd27113e9d718a95e60b9cf174897370b2adf3ec866686d1d177b230031c5a62d120ec03963d632aa9dd5ab739f1d02d51faaf7431295c","ssdeep":"","tlshash":"ce31dff66301841c97de05905f36b2d9d608f298d8cb84a5419dff55489ebda6b40a38","first_seen":"2023-07-15T21:19:48Z","last_seen":"2026-07-02T15:26:26.212074Z","times_seen":2852,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/crypto_com_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.431Z","timestamp":1782862834431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/crypto_com_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/090a6r7kb8eqn.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRKMbD5khkFjmR6nBznSDgjgTYn4yr2HdtWHoDEMHymZC8XYOO%2FqcQvKhnN0ZCU42sVRnLGRNBO1DV1GxUH0D%2Fu3SzFtzvsP3vGhdhQEJS4Mu2FaIIPiSIpDQhaTyA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044b3ee332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1130,"size_decoded":1154,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7a1c0c730ee2c3443a29e3665bd3a008","sha1":"3c04343682e15f5cbdb5859d5eaba3f666a048c9","sha256":"511d861c76da06e1fa67eac2fe74163b135b179524d530585559c082691c9a29","sha512":"73c0a3da935e95d4ab5cedecb031a0dc8de403b9e0334384db4df8f551e5917b7b4a4f75d85c38d5edfd5caa9827da68e8ca6bf296f8f6c16fe311ec75046b51","ssdeep":"","tlshash":"25214fe411a848821e00434eba3e66339d1670c95bd6c2513b5e2f6dbb888a78f234c5","first_seen":"2026-06-11T16:29:30.46087Z","last_seen":"2026-07-02T14:25:44.048871Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0li9mgra_8nfx.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.447Z","timestamp":1782862833447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0li9mgra_8nfx.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXTJDdtJUZMNdj57NZZeTwoNU07JO7MyQhlU9PKJH8txPTgtTsDztPexcj9nN4ORQ6sY%2B8fKiiXkpY8UJax6NSue4tREs9dNgMVOMynMA35kZjF9srt%2F1dxLgBkLEg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044509d732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103921,"size_decoded":19864,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0c1ca7911b574ce20daed1f833b108d6","sha1":"bee0a37c5dc9d23fa8e592d34529399de963967a","sha256":"eebd59a42ffd9f0a8cb12ed2797fba5025977de2ab885cfb28df20d9d2f92ef5","sha512":"628e8fcb0dc70c2b54ade8cb8b86552ba3a81882c1d3ef21162f7eadf578a7f1e1f03f0b59fccd849bb2e5e4fc4bf4df4dd9776c2ed575969f07a23c0416619f","ssdeep":"768:6jWexfqnDkUHRqSEyu+bauIS75xh+3BdOkgRt:6KetAkURzRb7xwxrit","tlshash":"c5a342476395e41e8f73dba0e91fb767c2184cb959638926d10d0ea4c94f8e1caf603e","first_seen":"2026-06-17T18:29:29.887806Z","last_seen":"2026-07-02T14:25:44.081865Z","times_seen":351,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/sigma_asia.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.294Z","timestamp":1782862834294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/sigma_asia.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7314\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4o%2B%2BoowdOijYkh2CDAP94YpTMjjrj%2BrfGOrJ71hm0o8OfjyMd2MRDi3jN0toyeVdH553Efg6NELLD%2BN6Kw%2FLXKEooVLMrM5lkTRQgYsNpbA%2FPIuPLo1B5XUpgrkCjQ%3D%3D\"}]}\r\ncf-ray: a141044a5d2432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7314,"size_decoded":7955,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b445895bab59165c728be6f9311eb77a","sha1":"aa063ec5f7114da40efecc83cba8927b20531199","sha256":"5803c79829793e691a94899e1badcc98a5f164ba2acbce51dd6a2b0df1d215b8","sha512":"14f13a1a932c6c8c6c789a90552e29954fcee766cd07289878e68bb1dfac0b48823b52dd4881479f53939c10068931959d5ecfc301a8e09201101826517c7134","ssdeep":"192:5JfVRd94jqovgtziFozgcoGqWclHjy8Xw2uyMS7:5JfVv94ebziFaFqW8bf","tlshash":"dfe1c03ebd66c165a649723d71d02392362406a40d430fc27cea25d3f7a56d333ea6e7","first_seen":"2026-06-11T16:29:30.436798Z","last_seen":"2026-07-02T14:25:44.088953Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/awards_bg1.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.444Z","timestamp":1782862834444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/awards_bg1.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 128038\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3gIPmIaBpgHDs2l6uHqj9hGBhWItKP42YlFpwJ574xNRrvHjDp7D37Xkmhl%2Fs5G3nBHELUJgaaKk6CdPqS73qtS7Ih2hvGGyA9JTvBK5h0Zm67md5YYHQda7ZQ7cA%3D%3D\"}]}\r\ncf-ray: a141044b4f0332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128038,"size_decoded":128671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x920, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c94deed18f9ed0ba3649ca3519515f00","sha1":"81f5f1f37fa8c5af7c1f385bf98db7716d952ef3","sha256":"f6edab4f36621cc68d052e76d1654377b18df5b8d8dd33a051c48144a7315925","sha512":"45d19b92282c2586b5cede10bf489bfe52c673ac9ce9024115f4580b230ea2e44f58d9831b2724a9fe0dcf653532e3b64e2fda30b9ce166b3548d00a70888849","ssdeep":"3072:53fIUSJ6zGiRGaeUnjBo8ZnGQFtkdOo/8N:RfIxJideUj3tF6Z8N","tlshash":"3ec312062c71565cd21fbf78cbc787f9256c38b6c28621ee13da0f6c16b49ee118187a","first_seen":"2026-06-11T16:29:30.425717Z","last_seen":"2026-07-02T14:25:44.084296Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/blockchain_com_bg_in.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.282Z","timestamp":1782862834282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/blockchain_com_bg_in.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55638\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHzQUnm1e75J8uFY9V6pbDinnhEAY5kuwYcfUHEPWK8aUMOZMFz%2Fo%2BnQKX5yhiFx78%2Fd2J8BPhVe%2FYUSu2tzwu1gamzlDbC8qvIlLdje2sGmkpqRLxM691SJgzyGMA%3D%3D\"}]}\r\ncf-ray: a141044a4cd732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55638,"size_decoded":56276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19e9d70945b3e6f294ba5d1879d3669f","sha1":"93a45f9ebd036a7ba17799cbdbec1a1b3503f1a9","sha256":"cfb1b5c6cc5e68cd42a4783b1a54b012ab0299553e23f4425efa1cc7f97a24e3","sha512":"3051c61da519ad99d5e8684ff7c7172fd3d3cd2d00a58766a81d88ee65a807638f3ebaf70e6fe351fa147f76dafbd4f0e40cb425ae29969287d3298e0ca60154","ssdeep":"1536:k96wA7P4uMkbK8A8tOCp+Dlr/H92UFE+lroqadJ8esTkUo:k96wApHrrpKTdBFdlrladJ8lTkUo","tlshash":"4143f1c5cca61600bd387bda4e423db3109851e76a2d3b0f47740a5e47ef4aa12ff699","first_seen":"2026-06-11T16:29:30.476167Z","last_seen":"2026-07-02T14:25:44.054543Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/exclusive_bg_right.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.450Z","timestamp":1782862834450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/exclusive_bg_right.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0tjlo5.08~sm_.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 276112\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3iBagcTW5AQ6hpYY0Rg79T2qD1WrVtCPPZP1uADjNGIfBVQ%2FDO86rhuB2c6ktdpjC2hR1F5NUlc79CAx3ul8AmDJznKJPo%2BihL3GTapVxk1wM%2F4uC9UTpoQRW4nCg%3D%3D\"}]}\r\ncf-ray: a141044b5f1532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276112,"size_decoded":276749,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c531d7f8cb8daf31fc8bbd374f809203","sha1":"844f0b6fe50511cf3a9fd21d3f0fc302f4c0784a","sha256":"e3268194c37dd9bcdb7cd323832d208e727401f2889a00a6a9420ef732c5e447","sha512":"15585b839620691b74cc1ef7a43fa045e120cd3c1a897ced71c76141c551dfc6b2c5c9f6fac6b4e5f875ceaefb92264aeab3eb62e35e4e26d618a414c9c160e5","ssdeep":"6144:tO+H/+2d9iwCyfoT9kliXc+P6OJGN9AmVNS0HnVuPOPIZ:tO+f+QtiM+P6OJGnnnjHnM9","tlshash":"1f442317fcc3d141ee4d29766c9e6bdaf77a9befd4c56c4d8140a4858b6038306b8a34","first_seen":"2026-06-11T16:29:30.419562Z","last_seen":"2026-07-02T14:25:44.091032Z","times_seen":255,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0byi9c1kdhku2.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.554Z","timestamp":1782862834554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0byi9c1kdhku2.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2F51T87wdJ1aBPIukbUkFYqBbesLJM6pGQUBYeRlkeq1FHrJ7%2FXuT4iIcMcMAaplkRdBR0s7DP0uN8FlG7%2BBeO3wYEGJGp7HYelDi6XeWZxPF5ClpMhebMpe7F1m1Q%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044bf84a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4922,"size_decoded":2470,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4922), with no line terminators","md5":"470004d83dc17ce8a5af09b41645873f","sha1":"4dd466d16f5d678758739f65ee505d7bd1a9f3eb","sha256":"aafac24663931328ce86e1020ae08240ade0ed88483fe7b49857003e6117ed77","sha512":"88b8a0ca2bc6512349653c965bd1c63cf7a36581d7655266f96718a2a4dfab1e2183f0f87d30cac385dbddf38ab8d32c84e371b83c44572ef2dd5eb9cb920179","ssdeep":"96:2p9YtpkojrYpGpUVFwAchp91tpexVfQApjFpBTpcFpe6UuWHSvUpp/TMvJ/pPg:wYbjr0wT1O7P0TUudYUg","tlshash":"bea1456fb04823902752199d21bfe4cdb02aec799b05186cbb91c17d27d2d98b1b6fcc","first_seen":"2026-06-11T16:29:30.421395Z","last_seen":"2026-07-02T14:25:44.09501Z","times_seen":254,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/api/mammoth/auth/check","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.053Z","timestamp":1782862834053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /api/mammoth/auth/check HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cozywin.top/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/json\r\ncontent-length: 38\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iafUXN498gyczwALC9herl%2BMJO2EN3csrtpKMsDtq7UyHh1%2B01snsb7nGz%2BnoDgS8iK14CEK0%2FrLbi%2FMI7ZisB792bP5ftzec40rxquVkaSZaPpCYUrLsPCuS7mHwA%3D%3D\"}]}\r\ncf-ray: a1410448d98d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":577,"mime_type":"application/json","magic":"JSON text data","md5":"aced0d4c1bf7b416bd8757e86c69b12e","sha1":"242609e9dc75daa64e55af8d8254cdc02722ee92","sha256":"831690950d50aa783757553ff7dce0e549b2bf0c29fcc850ee8ef7a7f6bb54fa","sha512":"8c854561d71566fbd9d1e18c91f1bd391cbedf2b2e8b52d84205d4f773f36b14bfd5d3ca2cba9f5a300b8d96b025ab3eee5d5e3a19985e78386e04584e24d0b3","ssdeep":"","tlshash":"8d80040115000173f4001144113c1d115c54533745410014fc7cd0c4c7530d53043c17","first_seen":"2025-09-13T11:18:32.558363Z","last_seen":"2026-07-02T15:26:26.2232Z","times_seen":18096,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/about_bg2.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.262Z","timestamp":1782862834262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/about_bg2.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29594\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAWMThQDmySEcCr6ODI3GfIX992ZQGnlb38jxU%2Fv7bZKXmslmkV8tnGWi7sshWfwIhLh8khzGSJXxB76y5%2FkA05jnTeppRJdTv6HAWnQXebdoh8BM%2BjlFKmxKjQYCg%3D%3D\"}]}\r\ncf-ray: a141044a2c9b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29594,"size_decoded":30230,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ff8b43854e7729ad418df70be40c4c","sha1":"a7b4ac23121c2d11db75b2b2c12d09987b8acc33","sha256":"b54b3eaca701f498bd6f338f80c9e09ed381d47a6cc919ac66a8dd8196c8a6a0","sha512":"b9fa28fdeee963587b9690e70f2aa77aee7b72565a4c6d13126d7e6309db6e4c6d1b9bcbfe061abca8743ec52b69bae5e11632c05e9b744305554fe32cdb6fdc","ssdeep":"384:yfPTXiezMR38bcaqLn7G1OIZOUtNitDj9yNVEWuWq5AH71czg7JG4G:YXVMR1XeE3tDUVEz61XG","tlshash":"f4d204c6e0abea72c67bcc78e5465c465357f51ce2d38dcd1f4ab02489dae3613a8072","first_seen":"2026-06-11T16:29:30.394669Z","last_seen":"2026-07-02T14:25:44.030355Z","times_seen":255,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/avatars/51.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.299Z","timestamp":1782862834299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/avatars/51.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23188\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UX9DcsK9ltsEHgPOJwTr69gyFiSh9dkjpN0COiogKZQODPamoBsyBMqcYSYJJZsN01ZoNoitqBSHp7kqQkALRdxATMOacx1YnOnJvx6IDhJsAZpJXsq0UVN5BIFtFw%3D%3D\"}]}\r\ncf-ray: a141044a5d4332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23188,"size_decoded":23818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14e3380f09f4cce12d233a676bb0e085","sha1":"bc9b5b97ffe902b52e5e6b78125e6c3709f8b248","sha256":"10b6377327e0d25d24422779cb508c4b075e95d2b98e5e8a532038aaf49ca171","sha512":"863cd9cbfbb107be8a2a60062b99e302d0b52a1fb5afdd79462729f0e381f5fcbfd3064ff8658723d7bb95506d08d384fc417fb9b1b18ec21b3324e9b06919ab","ssdeep":"384:Jcn2jiGIsbMR+FgiGEJfqQCHyuXKIgw9nNqGheM5WCt7sWxBuYJogMd0fj+VQS95:q2RIwRgiHq2uXsw9nNqGBb7XPJJzJSkE","tlshash":"cda2e1f57d68cb003bfa49ef7a91dd158bdc8e4592d5880a9ad9731430ba37c3973860","first_seen":"2026-06-11T16:29:30.351948Z","last_seen":"2026-07-02T14:25:44.077375Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/exclusive_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.454Z","timestamp":1782862834454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/exclusive_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0tjlo5.08~sm_.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXN6Njk4WcO7U5VHjmaMj%2FBhALoMs9r18vOIMNAdGyJAkbt1cYd0yULy1MNJ5oise90ONN0KCrEafuD0qftGVPSNPBSTjwz6d4dMj4mbDvtquTfQpvoUPa4pCSMXww%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044b5f1a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7637,"size_decoded":2749,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7afe46a3bb87300150b61c1bd8f8bcf3","sha1":"0cfdc61c6eed5d8ab3b925c5e832c524971caa05","sha256":"272f7cd03fc21cb9f4c351b9e2ee368ab0eefe2279eec02ec61c368f2c70cfef","sha512":"3a3e873e5d78055597f3dc2d242675765e0902de6c0b6f5933355bf7fc211124f30efb0d3df19ffebdaedd07d3789adc96ca3ccb8ad38c5a986a66d422c26286","ssdeep":"192:4irBD5HjDxKTCLxT6irBD5HjDxKTCLxTT:9ldjD0qlldjD0qV","tlshash":"acf1a3ee5bb86ef08ec8c3dbff15449c380984bb4a948918d79c5e492f61d58dc19a83","first_seen":"2026-06-11T16:29:30.367498Z","last_seen":"2026-07-02T14:25:44.04955Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/07b~lfkhc7~f6.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.445Z","timestamp":1782862833445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/07b~lfkhc7~f6.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jB%2F5YkICYU4UZOFEQyZtO%2Fk5GQB0Qp9MX10CR76EQBQ6jqU8VB%2BT4ejNR8g2%2F9WQrFzfGcXls1BteEd6xG3vCI32qTiHwcCoQc9wYiTZ67DclCTl9fmz2rfdqpZU7g%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044509d032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172200,"size_decoded":13536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"109cacd54b4cb00227ca58e34d8168ca","sha1":"9af3b7bed6b65acca8080874a47307e6a0d6b3a1","sha256":"4de148ca2676f0ca606715a307cd028d1cfa6f63a59f5ec45f259e0bfea61faa","sha512":"9c40e0ce244052efb8a56fcb6146993d50584716e713a4880726a2dacc446dec383d3f16b1e2f3888a414c83f0b633b3cbd87752e4d338764dcaedef96abdbf0","ssdeep":"3072:79zcwGUN94sY8YzaPnx1ll779zcwGUN94sY8YzaPnx1llX:JbBN9nQwZJbBN9nQwB","tlshash":"5ef3ef35d8d0aeda231c7be4d9051ac64bd1f0920022e9b6ef76709be8f4295f7d1836","first_seen":"2026-06-08T19:33:12.017045Z","last_seen":"2026-07-02T14:25:44.108462Z","times_seen":470,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/00txjv18y81xp.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.451Z","timestamp":1782862833451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/00txjv18y81xp.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEaqruk4d5AYxhTpZreSxTqm6xT1aZ9t6PIBrGg7ayAy%2BFqbk9MhKxNWgyU5zY4UEqBZ64dOrKdSo1uzhjt2FLa4%2FjFw0ZIDvuceVNmTFHk6Gcl1Lq2%2BI33c96VJrA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044519e332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90224,"size_decoded":28891,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65367), with no line terminators","md5":"9ce6fc1ac19a91ab9b96e5e1a9f282b0","sha1":"8d33c689780551b67888eacf406466aac6275d6d","sha256":"401596fdc663801d8d4aaf96a476f9d2468c085d11f942979cd2b2f4135715d0","sha512":"3d41e06e4f96724a69f2f40c00f8966c19f3e32e9f50aff7ead5fd7bf3fdbb2f486bd228fda15f4804451a5bac96cfeb96d3df1b54f322059f03494fa536655f","ssdeep":"1536:M8udv/NqM7t3AKjSkmE5P1tISAAjJp7BmWok8EO3KqI8GYDNFR9QJn5QExF8:oBAoSkfvtHXjJCOsjI8hJtQ7nF8","tlshash":"be93a657e3241b9a1872727afe4fe181f61d8cbb0799cb50b878e51927c18b87834bc5","first_seen":"2026-06-08T19:33:12.041169Z","last_seen":"2026-07-02T14:25:44.09306Z","times_seen":470,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/fbq.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.706Z","timestamp":1782862833706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/fbq.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vn97ZA7m9bYFzk2J%2BttrWC7zJzObAskOUUEhcsfkeZOtVqNtewbRR2zKHEZoPXR8KSXXUgM6%2FZROeNmTO7xDkxitfeurS91OSE9wzdI%2FCcq66wOpXmAxTz3aE9%2BaSQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410446ad3e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":924,"mime_type":"application/javascript","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-07-02T16:16:42.325658Z","times_seen":24760,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/fonts/klarheit/ESKlarheitGrotesk-Smbd-TRIAL.otf","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.503Z","timestamp":1782862834503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/fonts/klarheit/ESKlarheitGrotesk-Smbd-TRIAL.otf HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/04dt9~~_c8v5s.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: font/otf\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbMoloZ9A9FJ8xxYWFaJh%2BotMFivyLJG1qccOphWKLcxXfDEtoSVx4lSfVoZsHYOsr%2Br7Ic9LwTy7zvNzo5pwbQ9urHgLXXBnqvFLe%2BAtfp7vbhc90bCnLPSh5y4tQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044bafb632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8636,"size_decoded":7291,"mime_type":"font/otf","magic":"OpenType font data","md5":"5cfa653c156c665d569a48b53c56ceae","sha1":"16dacfab55dd75db79453fce084375ab084e152e","sha256":"f5ff34dc6823a5bdf0841549d371241ce06d53c0cc3ffa70e8d5df337d069041","sha512":"4349c60782a7d25ffecc1a09acf4150600ae324636213c5006f40972f62a278e12092a956dd0e6dec4b6c827c1be5f9ee75d29a9203217f139cb8bbbfeb815fe","ssdeep":"192:vM2wihiu51LGN561ciPHy3DnI0sr5LSoi2EadPy6Y:vKAzqN5MRS8jrY32Eadg","tlshash":"80022b50c3e49700f2e7af3245fb178a6726bd00a035d7aec6c417450fe67480e257ab","first_seen":"2026-06-11T16:29:30.428343Z","last_seen":"2026-07-02T14:25:44.056767Z","times_seen":376,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0fghvi7vx5udo.css","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.427Z","timestamp":1782862833427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0fghvi7vx5udo.css HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SM9EirN6Xied1GM9fpBDB5UOnZc%2Fh8n5%2F7lvwFswDh5R12QDlqZZsQpjnOb%2Fe8IpeQ9ga4qOvnkoJBXBdpWRjOy06IKIHr2I%2B7jgV6ETSMPYYPk8rfkGgB%2BGCuWu4w%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444e98e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108944,"size_decoded":13054,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (33943)","md5":"b0cf461ee26fe850006c123804aa96ef","sha1":"6bb82aa210c7bf738694af85c5dd589e46433c8d","sha256":"626e44ccc49602ee3124c152ed8a7eb2278910e950b851a5bd7ca2821d103983","sha512":"cc7666823fd04d13de0c74e498f3a8d4cde3139e227d165179f93cce5355448fa52a475ca604b522fb5d9f61e78aa6a2e840b9fefb25a48117ceaed5c5469a3f","ssdeep":"768:KQwDsiU3o3ecUS8ZVzvUvyEeNIL4nCR7f3ljrjE4QUllx4:E+ec","tlshash":"55b3f67d91f0577fe41df041f2893c6c8962e9dad8960bd6881d28a783c2df215b2b36","first_seen":"2026-06-11T16:29:30.386725Z","last_seen":"2026-07-02T14:25:44.113166Z","times_seen":469,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/crypto_com_bg_in.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.269Z","timestamp":1782862834269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/crypto_com_bg_in.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75808\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3uw67cv00MqnDc3VZBYLYucn16MnMBWAX3riKLNfiu6uOaZOAK%2BFjjWyTWF6P%2BHwtpuGV3YSMopcY6I3%2BCzkDrjwOY1JKJMMrYbSnHVquaBOhW86LsFrYxqEhxmgw%3D%3D\"}]}\r\ncf-ray: a141044a2cad32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75808,"size_decoded":76444,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f531fd76a341cc23ebf555221b365f0","sha1":"3ce715c3d12b8b197bf91eef1644b90969557aaf","sha256":"ec76e2092835aa919f1f86413703dfb6743b89aba08375bf7b003358ae358736","sha512":"b9cc78f192e75c02b28ab34f139492d7b2ccaa3facc1c873d657b59494903acf43bd0502762b5fb5ab296ec2bab0193914dfc2a87e7095ee9b818c890cbf72eb","ssdeep":"1536:fgHEsWBKkFbHPkIJkvMt2X7TNJqDW0Ubylj+jglnwOG743G9H9AdBlISgg:fgkBBHPVWvXTNYa0Ubkj+k93yAdwg","tlshash":"e473021a3e9bc240e3a16de7cb306e6b27d333da918b648508d52ac8913d76cd93ed54","first_seen":"2026-06-11T16:29:30.44575Z","last_seen":"2026-07-02T14:25:44.085897Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/trustwallet_logo.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.273Z","timestamp":1782862834273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/trustwallet_logo.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ImgmoengpeVgiDuRilcxf2X3IYUR%2FxFaPTIFLGVzKraVKMozIJ2zdKozG%2Br4AjwQSnUYPlsWMl89G3agyo0b8%2FmJjbKiFJay970Ix4bS8VdlxRPFFeEsXT8om9L8w%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a3cb932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":1006,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"95610a9779844de79d298cc54ad0cccc","sha1":"5f38a98338359e3564cd16454b8f152a3fd785b1","sha256":"33fcccb18ca22aa02623e434700a645c7935da1be547753aec410f6d9866396f","sha512":"98d76f3a1c01b102e25d4e6b5cf241d9a23faa31c19a2be0f42f5cfa1b03c5a900e6a88ebfd3c386f23c0d1e2681c5351f23c974029f78dd5f9f71b5ccd8cdfc","ssdeep":"","tlshash":"bc0178a992ecd822e548c31ee91cb03239a960c775818aa0f2dc5f5d5b4a1830d1b3ec","first_seen":"2026-06-11T16:29:30.448684Z","last_seen":"2026-07-02T14:25:44.106388Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/question_circle.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.308Z","timestamp":1782862834308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/question_circle.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fX7T6KBJvynf8r1mSzzrkcvwh%2FIwzHyV2115TBqwGihDuF%2F269tsO6QpMV9%2BoYBxJrBKmRD0hdwf35bb%2BLkIFzRwGagchQh%2FXMRvZl2Ml0v8XDJnYjZ9%2BPeCrq9QVA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a6d6a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7281,"size_decoded":2470,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b9b5108ecebdb639d3b0399d10703077","sha1":"e860492e644a7cdd6333e5e1db97c620593202e7","sha256":"eaecbcc09b021f2276fe5dda544ca474316bf14ed8bcbdf72551c25dd6f7e3a6","sha512":"4fb064887402f7d3919a78fd9d76749e78184d93be017df629b57a4f6eaab2aa3a20f35b79318b7c11c01d026f54f97fb99af27e57ce8204471d9fae4998e0d9","ssdeep":"96:0yfkJRlQF/ykJrI2QwrmMQA/qFk/WklrmMQA/qFk/Wkdu+wOe5r4y5uS+wOe5r47:Tpik/Dpik/eq8r4y5uSq8r4y5u84","tlshash":"10e184f867bced96e684c28eea8255883e0d40c75a89c645f36c1f3b1f21cb91d272d4","first_seen":"2026-06-11T16:29:30.480685Z","last_seen":"2026-07-02T14:25:44.101116Z","times_seen":255,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/our_team_high_bg.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.440Z","timestamp":1782862834440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/our_team_high_bg.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93848\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRUukfdFx3mLsdbphcEY8q3QfLPtcMdCzBhB7%2B%2BKD5WETooPCEaq%2BSQlDC0OOJZpwiK1GNJCaU2e3s1x0pcRVlY65iICk1UZv8CKGN6q2yijyah8SbpCtt%2B51uQR9g%3D%3D\"}]}\r\ncf-ray: a141044b4efc32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93848,"size_decoded":94486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da26e203a963ca959f04d3381967a5d9","sha1":"7facaf89035236c2bbb4a8dcfc9121f380f7e352","sha256":"72e4fda7d82f7afdc8d18945349833d625df1c81db5358c328cde9a0c60d8e0c","sha512":"8cdb3140314edf494a98350851b45a60df5862dd67ec49ae7036391a022129c131c349f0b74f89b35e989af297e439937be325c5d45731230de8ff331fbda2e3","ssdeep":"1536:x8dAKOnFOSweAPh1IdJexOU9ImJ4dUQ18Fqg+bjM6Ap1znpgW/PRytRSl6inCMK3:x8d7OnFAPhmUym48FqxbI6ALeW/PYcV2","tlshash":"53931288a925a70ea450cf24bdf81d77d21018d55336ac35d829aefb633983d3d3e10e","first_seen":"2026-06-11T16:29:30.431661Z","last_seen":"2026-07-02T14:25:44.123177Z","times_seen":255,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/clover_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.448Z","timestamp":1782862834448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/clover_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYgq3%2BVOLfhcw4I%2Fk2usy%2FifK07K4kcuiM4UsGfUrozDBAC4qCRW4DxNoc%2Beyim18Ao4U83KbVY01waXx20K9plsc1G3hh1tMxVbXnFTBAZBDmVdjtTAHKH20DCdlw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044b4f1032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6183,"size_decoded":3629,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a15718f7a3c7e8a0dcac6bcc183dbd31","sha1":"fc6a988355e4cb5bf9f69b0b30da8ac04a6002db","sha256":"4e77bfd97a131a34ad255b4cf9e6495df4629ca67157bceb57885359d971603c","sha512":"e262fbf720c155124553e381938c9624664d62405f3eec1829b51cddd32c8a698b0e1b8a00dc616fb4ecce6f0840cefa774f54de5f8a9ccfd955d2a6bd194d36","ssdeep":"96:s0rPKoKaC+Bh6N5kx4hVD1Pkj6WTONs3Bgxd0IGPvg+UapwlIB0gxdncSu:3KxgBhy5kx4zD1PkOIAsusTvzlpLqOc/","tlshash":"fbd1a49c7ba942bcf105a2fccd0204a47e0e24f77601857cf76d2e11e71689dc85b4aa","first_seen":"2026-06-11T16:29:30.399632Z","last_seen":"2026-07-02T14:25:44.088464Z","times_seen":254,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0pnq4eaaz_p9e.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.443Z","timestamp":1782862833443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0pnq4eaaz_p9e.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTRfBYZZQkI5tUvVfjMIA3D025JbyRDYL6emp5RBVhRgLoe8KHJZCaMrcdPeWIqnrBv%2BJ8vDnAtXtYX6hZbP8QBkhZDeScdBr1CobnZE31INNwAKTL6kVbk%2B3VQsuw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044509c932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17097,"size_decoded":7790,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17097), with no line terminators","md5":"b145a7b648c6d0c066d1f7302979bc57","sha1":"2c500ca3a76eb272e0234917fd7d676cfdd1c997","sha256":"42473573d2b7ad3c181618364cf41a84ab45e5a7ff8e8dc3981fcbaf6fc39eae","sha512":"4175f19e7bf1800e43c3894420300dcfec4adfaa16c1071baa6ec79d470d8b7ceb0c73ba859bf598e47192aa89af659be8ccd032bf3a8792b50a7c8087c2bf72","ssdeep":"384:KgPN/B22tHVGVj+jt3t6jbwmzM5VKW0KInG/as1D:HP322tHcN4dEaJ0jG/5V","tlshash":"8b720a427498fdfa0b57d39cec6b8004a17e297ed8cc80bd8f6cdaa4317594a7094f69","first_seen":"2026-06-30T23:32:44.784289Z","last_seen":"2026-06-30T23:41:03.607154Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/avatars/88.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.305Z","timestamp":1782862834305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/avatars/88.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15284\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLKBVmNSTlzj%2F6EByUAZ5CYjrkkJALXOV%2F5lVJK0S50UjNWiQ1zT5nBD7yPVV9WH3gA4yp8tvyp4aoSeV71JGO1cNz08LCyDmrAju%2BQFkrpcU3bPBb967qw%2FRCDVsQ%3D%3D\"}]}\r\ncf-ray: a141044a6d6632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15284,"size_decoded":15922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b64c959dd0e62a386cd317e1de0aa07","sha1":"125a4cb5f83d47e02ec7515f7780c18b58da125d","sha256":"f34e000f338e7dca94e9ee5dfa5a3f860f1224d45f58fc40671e768db13872e4","sha512":"105b627319b17c697e45b7749f34caf00b7cbf35e06af3eae16cbebe453c9d534a49c99d2c2cff91cf3366e317fe1add41d6258ca976d1684b39b10110c51640","ssdeep":"384:JDLeB5Jmfg9ooE6RA3Tx99fxiTKq7eCJ4gNNdHd9U2rIfd0:FLebJURKYFDfxiGZCJ4gNN2Wg0","tlshash":"af62d080e89838845eba530ef7199d721c685178fa09d4fa35bf048423cf9c19d7fa61","first_seen":"2026-06-11T16:29:30.345951Z","last_seen":"2026-07-02T14:25:44.045623Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/feedback/3815216.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.307Z","timestamp":1782862834307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/feedback/3815216.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62260\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGHU%2B9TYTn%2FZwqjYW5u3FP1oGT%2FCpJjdqagi5Dfj%2FzHVidpJmujjUL%2Fb5%2BcxAMw7aU5Ph8HYD546giM%2FJLfqWQIZxF3F4kuORZkCUtofgjh%2Bv8wU%2FjwnmGRMO%2FbMiA%3D%3D\"}]}\r\ncf-ray: a141044a6d6832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62260,"size_decoded":62910,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f40f8ff6e1ae4780072180beab03343","sha1":"c8effeadb49c361db3952781b86686e850bbd39b","sha256":"e8bcdff3606247a9fc22b66d876b5ce10d4310e6164416398c90f449ffb18b56","sha512":"5db33ad9c20600b01d8da6b34bf8fde1669e64e1e5a8e7c2aa597ef891b0f0f027abe8d73ab320477e282bf5f181f8f259d5f6ccb2f737890afbee0757049a35","ssdeep":"1536:afQMyMcmcKXDmzUrGZgOVUWMzUGISpS1SHEoJz:afQMynfKXqzUPBRS1K","tlshash":"5c5302b394466a74c29732735d8fecb3ea79ad8968bcd124761b9763b0c2337781c046","first_seen":"2026-06-11T16:29:30.4516Z","last_seen":"2026-07-02T14:25:44.099757Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/header/logo.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.389Z","timestamp":1782862834389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/header/logo.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0tjlo5.08~sm_.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vg4Rw3cvtK1%2FEuxYJY1tlNc0h%2BEDRuYHECqZnOrkrNhTbCQ1oR%2B%2F9hyVpjYZiNOP8rcFhRjoOTXYzu1qYfqU1G%2F5fciiKS%2B4QobRCJJ09dtKXIkEFG36KUTDpayWAw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044afe5d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5351,"size_decoded":3205,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d7cd8403556a0604d03c1bd2fc6dce23","sha1":"d3003125b31877017ea94c9d777bffa93c5272bc","sha256":"01bb2e13fbcc85f27f3150b986281479ce902a3cb8d46ccf93608eadbe726e81","sha512":"c96e75a403aa8f49ffae539cd763cefbb7c4eda1c5f361aa9e4639342e3fd27004663b55ff4d7eaf32ee329ef288344199956556780aeb88be1826b234124290","ssdeep":"96:p+IA46zCbD2QgGzITaBf9UiMzCCyNK+STEl/xVThy0W0BbUHrHVn:D7z3rBftMbyNK+Sc/3hy0b4zt","tlshash":"43b18298a3b4a2fcf84473e4d23288703e921cf525029658d3e95c95ce7655d08f68df","first_seen":"2026-06-11T16:29:30.441022Z","last_seen":"2026-07-02T14:25:44.098308Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/in.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.645Z","timestamp":1782862834645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/in.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gd7nnM%2BLiXUoWbUADs%2F7HNPXVqJ2psdvqowqwo0mALh078A0ztme7hG746zKJLV8l0PzEBFrmjcxnMpzablPKfplI4K8eygAq8BJ2oCOSBu844Rs4qXplBxwIvW%2FA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c893c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2301,"size_decoded":1429,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"f0c892dde95804d59b20416b8db9fcbe","sha1":"41f09b07a8c26144aff93575ba4a07a0122bdae6","sha256":"aa82222076d0dd86dc6f37947faf10333212886549a33c4fcf6b44141b702018","sha512":"8eadf55e31f49edebffdb864eeec76900caf6f5163d2e3cf1988757271bb7c5e2c26c3986b4fe5b2f8953e733ea0c4bf4fb3cce0ec4d1010e20f5125abde3ac7","ssdeep":"","tlshash":"2e4165a9717df8cd9b01c6fda63bb9f1b00f50496b12d3a9b55b0f0a481a4fbb0056e0","first_seen":"2023-06-13T16:46:48Z","last_seen":"2026-07-02T16:29:01.147341Z","times_seen":10714,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/16rmwuk.q6kce.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.432Z","timestamp":1782862833432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/16rmwuk.q6kce.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xgWitq8Z3hDcAmkihjPsC24HjRWfXDqf9KG3B6RfEDp4htUNbotunANo8VQUS860U8Hw0biz7iUfFQwpAhs3s4zKBWT3iH%2BEnjQGpkkt6oDXAIuDxeuTZ6IaTa1pg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444f99d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53814,"size_decoded":12426,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33781)","md5":"f5cbdef62f70832a02868c81bed4d0cd","sha1":"4d77c0b7342c6700e8dce963de3136d937d75b23","sha256":"1772b49f52d973040f54ddfecd3ec3c5333a06566491f44d881a06852d94ab32","sha512":"fcde5221d5f85fd6c9077fe4092dfd79e9901552845905b925e095b1be1cc2de0d1ab165ab5aa309fc9db126316de67fab111f21da93129d2c8887c87f886d9f","ssdeep":"768:7AJ81OugdCHq8di830F9Lpl/v+GMd9mML03RnyiGM:7AJ8I+xdi830Fwq3","tlshash":"aa33d6b172d5faa2429380e4d43f2017f23d0c7124ad7470a7e89cdb754898da6bafe5","first_seen":"2026-04-17T19:00:52.214884Z","last_seen":"2026-07-02T14:25:44.094047Z","times_seen":473,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/rewards_bg_in.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.257Z","timestamp":1782862834257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/rewards_bg_in.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56870\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgG7TJERRrIeyeXoLVOOWE3iMFIlLPa5%2F%2BqOQ1R0eUWR7y3VIXzoCM9OYf8rGhejytFjSuODSCVunLtRU3MCl9kfpmLy9up02o%2FeXVKD%2FppZBbZSBR7JcTupUPVI%2Fg%3D%3D\"}]}\r\ncf-ray: a141044a1c9132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56870,"size_decoded":57510,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90e385556900428710cd66ef1c139fe3","sha1":"f9bfc927638316f4aa746f325a5f2643095814b1","sha256":"0c0ec423a091264d8845667f030c390c31f2257c1cf518a7f0ab8279ed8f98c0","sha512":"377d07bca395e43b245a9b7cce760ff0156c29fb7c24b7a37cc946345241cc9724cdaeec7b38b2d679c4f3d3473e6fbdea9a6a64bff02ac748c43a9393986e1a","ssdeep":"1536:O2OcO7K1w2U8R4IY9XYSNdSfKNCIfaFAx:fjOV2D4IYj97iOx","tlshash":"f3430115fa01b231736a34403cb4bcbe6486b75897ae009e9b61afc857533b4fe60c76","first_seen":"2026-06-11T16:29:30.39174Z","last_seen":"2026-07-02T14:25:44.076541Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/136wspufxw6fc.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.552Z","timestamp":1782862834552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/136wspufxw6fc.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOe8mJSxQcRLouVvH7u3cBOLgTUCYgXDgt3BXibrHr5kSXiwp0n5Tw1ZAjSnvxc9zbLGdYtVNQzn111qPWqXgwRQPKBp5u%2FP23W0TOYCksMNfsdhY3c4YEtMKYmJ4g%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044bf84332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4529,"size_decoded":2217,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4499), with no line terminators","md5":"4004a07390e470c485dba5c61fa4b70f","sha1":"46e8e42a20cfe1e766d29da65f3b071143863fe9","sha256":"35d73b5e32141bc85bd97a3d47e035e94d9cbcc49c3b2a1fec84bbfc79a2934f","sha512":"89eb61b2f4b2ecdec634a576527c4711a93d977ed01666ac5bce8b8a290cf8197a41c6665ca696193e5998b3510716eb241ca5128c3e8ab408f16cd710949917","ssdeep":"96:8NpZW8YpPMg6npt1npYA7npUvWh+bLYhfnp0Wkc9OIUdnpzp53anpYvZ0Bep0WJe:4KbshpdclXZ0B/Me","tlshash":"6491fb1a514932e13b222a8c303bdd4ea11ab05cc6164df56b6584bc27dafc4f867fcc","first_seen":"2026-06-11T16:29:30.477923Z","last_seen":"2026-07-02T14:25:44.031781Z","times_seen":255,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/jp.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.646Z","timestamp":1782862834646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/jp.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EWEyIjroGI5wFV8G9KfHvdXPLFMY%2F9riu%2FI5yQ3lZYETZY3GXHY8D30QnP7w%2BMjsSS4%2F04g56rjMJBlhAOeFywQ3lSQfxUIskMg6mJn0yabh6mkslxyDLmwtMpCZg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c893d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":822,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"3a58d8e5d92ed893921b644bebb7cc3e","sha1":"66489712a0cfaa93876ebc7168a32c729fcec066","sha256":"b964f3dd88f2596555a34c7ca3dc575aa061fa455256f0bcbfffaa62ee771c7b","sha512":"b88069e21cfaf5612503a845e79d159b57a71dabf3ce4b25e917dd3348f6371dbcd18469f426b8f9e4c19adcfe5f1b3c33547f8df1144f397fe0b325283ae406","ssdeep":"","tlshash":"a4d0a7a4d169d9c64810cda83eaa32c1554e53373645226bf0477b18e4cd6ef3245b78","first_seen":"2023-04-13T03:03:27Z","last_seen":"2026-07-02T15:26:26.206585Z","times_seen":3025,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/04dt9~~_c8v5s.css","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.420Z","timestamp":1782862833420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/04dt9~~_c8v5s.css HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0612sOgCR%2BkDse8cW9WxoX9Fl2Y0PpOi%2Bh4PTG02myM%2Frpmux%2F3vvZJu5GKLVuz9SrUQeCLGHhiTGwKQuGFJcPGnvyvgn6FsGN7VZQkrnYcqucqr0%2Bnj%2BtzxewRYbQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444e97332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1177,"size_decoded":1193,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1015)","md5":"bac1111d09f9a0f42404623dd069ddea","sha1":"f7cc20ddbdb329ebe208bd169d40661cba6b9117","sha256":"0405a6a453e6e719d9a1bc04e8010bd99ef5675b77c44ea576f0c5f44d402804","sha512":"7731b68d75610f8113242cb3b3438d767dc05e8183ff8cabc646b69e580fd6c66877e7884c9e6ee108cac21921941bafb005091c0f9f1900ad4262fac871b429","ssdeep":"","tlshash":"0721cd9ca1a4a0b3b4a39b6932dabf7c4829dd82cb460faa6550735143c19f22132735","first_seen":"2026-06-08T19:33:12.053974Z","last_seen":"2026-07-02T14:25:44.091521Z","times_seen":471,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0tjlo5.08~sm_.css","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.429Z","timestamp":1782862833429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0tjlo5.08~sm_.css HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErDqUMgJft%2BsaTtGqdILiQ4gdGTiZm8u0YbCP%2BZqgj2M%2FfS2NaklkYacSH%2B7FLOzFf98GwFaTgC6JdlSBkYt46V0%2ByVoXIoxjwAqULJNIkGkkD3VEPxnfDzZC2ZLgQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444e99532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118300,"size_decoded":14799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14358)","md5":"0bd486ce6c18512e789079ea01b91dd1","sha1":"8ddc0e6ce0cd4a969e66582ffac9d5d86ed6de14","sha256":"1a14298d013b289acce457f73de23a6fd3a49d167e08ea2ff74db9b9300d0493","sha512":"630fb56b50f84b82b4bb56f1972cf3c3c640b89238926f8325faf7303a9f8020213a553a4d2683a01d6f524fd90ac36e6efa62078d924a42995279509a60d554","ssdeep":"768:QVbrAx2I1l4B/mkzbBy8ZeqpCLHlbcwTDQ5lojKekw3T8IDN2Q93+scCvmV2ff9S:T4PzbByJpbcw3Q5lojKek20","tlshash":"64c3e17d50b057bfe81db442f6887c58caa2e6c5e8964ee6480c29a743c2df115b3b37","first_seen":"2026-06-11T16:29:30.395699Z","last_seen":"2026-07-02T14:25:44.08691Z","times_seen":469,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/de.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.639Z","timestamp":1782862834639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/de.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jPIjzbu3d22V9QGBym4ei1a1XC%2B8xcYS%2FCJHkMxe5o%2BpzLWFBHmg1xbwV9Mfjie9gue2R1vNy0XxwkWRiYB33RrrCNuVABvAAJh%2Fub1MDjWfJdciPWMDgaJYs9VZQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c892732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":829,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"939afd91bea7074f84f4a328ca095295","sha1":"1a8edb7520cb812fd35996134ae823fe8ade03d9","sha256":"8e3c8f938c6fc4fc97c81f398a71d0d789b44b6be458469d7056372a2c05837a","sha512":"a3922e78b9ac5209cabea2c0945d474d24035a4e78297b3105779cea945b931ae83a59ffbf73e2877f2da42e0ff7fb5f23c297c1d7f7d09da3644ed63d82ef6c","ssdeep":"","tlshash":"c7d02bd8506ae8c04d16c7603e6c32c1288a6259238800dff0835338a6cb7ceb745f50","first_seen":"2023-07-03T07:07:12Z","last_seen":"2026-07-02T16:29:01.106889Z","times_seen":11121,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/09m28z2r~.w8j.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.431Z","timestamp":1782862833431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/09m28z2r~.w8j.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0BEchqkrg7qRahHXPokctjHnt6uQRfZEowiu3Iw81pcbfZenqGBGXT%2Fvj%2FuNvUvfMazmweWx0ouUXN%2FMkeDs4v6EejofplIeOjhfHW3CjyV2YojBpP%2Bs0jp7U0vNQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410444f99a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15910,"size_decoded":6508,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15910), with no line terminators","md5":"295cb7b39a766115859fdd340bd5d661","sha1":"4f8bc00001417248ceee285064417928d803a6b5","sha256":"ec7bce2e98540116bb9d28db10d536e7080f5ddaa0857e69c61ed1be3eb349e2","sha512":"68efe9be524b8e18376d1e860d1005349b1f4a730ff580d5234cb768e006104667501bd4df92408b23368685d37bcaee494016ed18cd363cc1a939069a6493e1","ssdeep":"192:m6QqMOx4O2NbkLEOrd6kFJwiKDcyfKm4i5LEzCQ6aspmi+fQjgEzmQ:mqKZBaj6kFMJCm7Ezsasp/vP","tlshash":"2c62e8ad7155f0a10fa36465407f400bb33929b6286dc5e0e3a2ecf5a9b456ec133f6e","first_seen":"2026-06-08T19:33:12.049499Z","last_seen":"2026-07-02T14:25:44.090548Z","times_seen":471,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0jl0ksk6-5qz8.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.456Z","timestamp":1782862833456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0jl0ksk6-5qz8.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mkx8hw7%2Bfkgcay0ztpNoMM13R%2FoMKOA0BPgXi8L1RNI4xkRtNVyLUjih8WswYN%2FixCpy6mtXijCYiwBPCPXolXaEXK7fbwYhBOBzLTdo%2BAYfj5O2RSsrnuFePGGgQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044519fb32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81112,"size_decoded":23343,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"27952518666dc478e2ffc910e0f33b23","sha1":"b7668fedab824415a8adaa1d5ea97568b85620a0","sha256":"f1d895571e774ee555761fd87adec9416ee9287d57544e01bdf6105b9dba3d46","sha512":"3fa0819f00e424e20971b4c076b200ddda0c27351df9916e99951f93791fadcf312b9beecfd7837bc1c404dce17e69c43470e868181ba248e2fad0aace3e1a56","ssdeep":"1536:h1otOBTamMABecSsuowgKh8Y3wQNerj1+sXYzQb1:h1NavDhw1+sXYzQb1","tlshash":"6583a846f0f4e7faa44d0a5ce41f4018e79e2dedda846df8d7acacb012114e4768678e","first_seen":"2026-06-30T23:32:44.791734Z","last_seen":"2026-06-30T23:41:03.62006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/card_currencies.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.260Z","timestamp":1782862834260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/card_currencies.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MymlSD6IPoqHJvId0eBLVOw9sS8uln158PTfjbThsJVSQugnj98cUF2JsmjWeRhhC5Y3iIea7acF4BK%2BgRAfzSa%2FxaDQmXKATp8OvNJFZRFOOxYuiYNmwiFqR7aBmw%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a2c9a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6922,"size_decoded":3503,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"deb2dadfab7896d467ae2bff37ca6895","sha1":"b768a716f2a4664bf0c828363ba82f4b9ce3d304","sha256":"215ecc2e2772aedc12f56fd44f6194e631c4880ee2b9be09d6ca310462e0fa66","sha512":"01d25940ffb112da1b55faea4da368f39af328c7d298269debd9c7e4f7a41d36e41ea7e6aa9bc610090b58eee33e5a25a0e711ffffb2136bd7741e20e76810ef","ssdeep":"96:gAyGlgnFHGJZxom/088m+kw8o822OxZmJpoOePhOiYg4TvygHBgMFRt5uZp/Uzxq:fKnFmj2887kK8FOxZe0ODbKr/d5GqT","tlshash":"e3e197fe26e805e0f44297d6ee33a4793916b8fe6f908795f2888d9437514c8c85adc1","first_seen":"2026-06-11T16:29:30.397217Z","last_seen":"2026-07-02T14:25:44.115524Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/awards_bg2.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.288Z","timestamp":1782862834288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/awards_bg2.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46902\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glhvD02oUpcvA107P5Pm4a%2BVQn2QBkgs%2BMxxFkvbmJIFWz%2Fusquxnc7p4SiZkJrk%2FTXeFCNichTlnnviz%2BPZfjZqBUxhei9%2FnjowDckBq6cO6i8DefFrcnPsg9J5fg%3D%3D\"}]}\r\ncf-ray: a141044a4cf732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46902,"size_decoded":47544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6b8d428b1accd6c1528b9816715af11","sha1":"a0bf20c9b56c5294da4e6146680a49d24899cfc8","sha256":"142c528af56ffe197219f00734c512553cba0bd8ce7435f3d499ae2174e63250","sha512":"c969609b71d2f18c6dcae3a8c16f4cfbd1f16f0f172219fce36f3fcebab7366d2115c8bd30eba703886bbc9761cbca737e2040eb30146b802c920a340850cff4","ssdeep":"768:uW4SsjfBRq1QUDOtoO5g5ODFLcT98fte856n32nrvX9T/wdLrYuc1pXEtEKJd0E:8dJIRO152ODFLcJQJUn3shzwdhcrEtEg","tlshash":"0823bdd4a7761080ef6634393bbe862d53b0f99ee68c32c98293d934e3515859e49cfc","first_seen":"2026-06-11T16:29:30.430475Z","last_seen":"2026-07-02T14:25:44.050853Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/footer/crypto.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.317Z","timestamp":1782862834317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/footer/crypto.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFRz5EjZig1MySRCCqHiwtgw3J14T0zm82hcy74vkBP1N5KtlyQSvGwFhmkwrcQPn5Kc2LWBdR7YikDcGc7Rtr0WuV6rAgf6CdVjuQmfNqTiWGLZelgddRx8JPrRwQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044a7d9532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5827,"size_decoded":2562,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8d8f9e1d212d806b50213dfd24ae8941","sha1":"73d942bc8cf4f575839024a4844036212a5b43e7","sha256":"c037acd3b6c1ecd1f2a05995623193f8449b91e5a77505fad21aad7de4dfc39d","sha512":"31178a84c6f4496c977390787e56908aa8611ac052d4ad6fd6883eb9a2487a5eb675ace306beca16ce30ea0cba9c787c3012566568f1ebe2e562708fc3cab9c8","ssdeep":"96:KCClbBTlm/2KjpjdHRMIgb4R1rVgwgNJqMFDIcB+iKqOO6jF:KCC7lmOKjpjQUTcJqMFkiKY6B","tlshash":"eac182e512f8a2f66514d39c5718a4fc3d3b30eb6b1a8645b7cc1e782b600ae4a679c4","first_seen":"2026-06-11T16:29:30.470732Z","last_seen":"2026-07-02T14:25:44.074516Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/top_block.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.394Z","timestamp":1782862834394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/top_block.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/090a6r7kb8eqn.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7LF%2FEgy0hwIjFMvA%2FJVb79udryJdG5rTblnBIMYAgNVFNdj0EtGAtr1OUfNkqVl%2B85aM2fZ2efDeobwei%2F3n7ryVnCd%2F4rWZ%2BqR9Vrwo6ig6Ja%2FCt2DZJ3%2FKhwAGg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044afe6d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5406,"size_decoded":3277,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"5806656ac69db0674fed322e975835ab","sha1":"d662a90777d72b28bfcb23bbfd6211c64128abdf","sha256":"bbbaccc12198e60bd52727d4635127433c88e2466fbd170c281d4277f5f6b613","sha512":"2a72da3182b770f262b69589f72aea8d8453aceba724c6b251a68041ee9899c031258cd668c92ac176068536a8fcbe288306b934a5d5a19b722c7a8cf4fd13c5","ssdeep":"96:YinLIhYkH3kj17+4C3R2VVdQW6QfcyofBykXeJ1ra8AINeTuDVOEj9VoZB6c:YinLIGkkjljWRsd96qqMdaINeTu5LXoX","tlshash":"90b1d6dc63b483f8db86b3e9da3394447e4520eae6818638c34c1c80ba669bded15dd1","first_seen":"2026-06-11T16:29:30.4571Z","last_seen":"2026-07-02T14:25:44.075332Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/assistance_bg.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.427Z","timestamp":1782862834427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/assistance_bg.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3458\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbizJ%2Fir378O1lT48lrX0oyOmkkAQVMby0iGoR5HtntX%2BrMCfDwReB%2BqD4gcPDLAlJDxC6EFWNjDxjwmGMaALV9rGfMh36wjMqI2cBgHHBqlQEwih%2FMRhvbweGoIgA%3D%3D\"}]}\r\ncf-ray: a141044b2ed432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3458,"size_decoded":4095,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 636x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14981feb44a77f724cd54b3471a995a9","sha1":"fffeaaf9bef47afd2f968c803eeaacfe4e7969af","sha256":"b75eec4ccfcf02c1bc391a29f4685119e2737e5b4b1b2341d2d08d516d46d7aa","sha512":"7db20d684b5e098871cc154c08ce0a21fb5655f3a0f262e2e76a94a3bcb23b42a84135167e57a11ef8b56e15d3a606ad62bf209197b36887112d4fc31be95ece","ssdeep":"","tlshash":"9d613dc592d65fa1ea6a8cfb94b1d130606b5a28828f70274470bc83cb6c3571b8ddd9","first_seen":"2026-06-11T16:29:30.385678Z","last_seen":"2026-07-02T14:25:44.083789Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/twq.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.707Z","timestamp":1782862833707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/twq.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CeL%2BKVg%2FNucriuvbRGWEUQNPyQiVZnOJM5XPLHvwO4STiFFBDzzWzOPuBjeEny51iJApJBlLKdSVlZtIh2mKDztWdEfvDwuQh1W2xQvS1EpqAAnZ%2BPM7K66yIGx%2FQg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410446ad4132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":869,"mime_type":"application/javascript","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-07-02T16:16:42.306537Z","times_seen":24754,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0gtqnwqp2jd2_.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.018Z","timestamp":1782862834018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0gtqnwqp2jd2_.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FdFxUPd5zVJUcXqRudR1Z1H47WqSwaLG9ClpB5BJMX5%2F57BrIpVA9EQcIINpUqeYEZlvSnscEE5NYJ%2F%2F1GNhO71tXXEtBEXffcU7s6CrH%2FmqaQS9BzyVMpCkUg%2FBQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1410448992d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118151,"size_decoded":34744,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65510), with no line terminators","md5":"fbcb0a523d301ba7e15c269d3a124232","sha1":"fd263d422ba3e2f5182f6a75b8a96fa1d3ed4112","sha256":"96fc85ad0a723d02940ba6592f17047ebd25055c1fc7e4fe0b171ab0a8b1cb10","sha512":"f9b75df2b08996a17fd9a03d7107a02c50487bddd3fc081e685f5400206f13692a054c49917a6a720ab7e70797d72a6a4e4dea29ccf7f320431daf86a5d421c8","ssdeep":"1536:c5gCTP3oPWPyx34NhAG2CGpDWLmLFCKxgogH69pca719HnZh57+rzDgdjruQ8CpS:o//PyxoN/Lex1gH6JRRwDXwpVol","tlshash":"72b31a17d24423f217512695740f69c8b3bee9c41b62946cbd99803d23ac9e8b1b7fec","first_seen":"2026-06-17T18:29:29.90313Z","last_seen":"2026-07-02T14:25:44.087385Z","times_seen":348,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/news/bg/deposit_trust_wallet.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.458Z","timestamp":1782862834458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/news/bg/deposit_trust_wallet.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 167850\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmzBAnHLXI1uvdNiWlOuiWV8Kx4YcVAr%2F3fAXwc9P1bfY1lj4F8Ld5k%2BRdcADKHFZe%2B1uBqzOUL5rwXjANlNoGuXOSouh94ptqwX0BLxcDt8pOYcovmNduJ%2Bx1HOXA%3D%3D\"}]}\r\ncf-ray: a141044b6f3832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167850,"size_decoded":168489,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"225e969483f818dca3354362a7d1d4ed","sha1":"bb6e2de06412750109788350768ac7ec55287eb9","sha256":"ca3c7d2c9cfa66e9c33635a85da839d378564c31fddfc01378b658a86525f917","sha512":"3d5f9bc2f34fd84463f48f633b3103cb0ee62276122f0c05742f0565b8a7babf259b4cadabfedbab56c2047afba10c0551b75e1aee36018fe8f1433a1bccdcc3","ssdeep":"3072:aHB5SWaFCX6fm0o/0HeiLtWhDt6EMsfSHqRNigcclgvRtXbw1BW3r/GIL7yeBptY:aPSxCXUoyUhDPt0lc+v3bw23DVLhpkQK","tlshash":"baf313f76bce876bf52a4df107885add89133d224c6b782c46846b7e8b0e6c55f48034","first_seen":"2026-06-11T16:29:30.37885Z","last_seen":"2026-07-02T14:25:44.1074Z","times_seen":254,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/ae.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.644Z","timestamp":1782862834644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/ae.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gz6YmAXjjmBm7lmfc3%2F%2ByswzfN6x%2FDlSsh8Nk4QA7rUcFPXxgOyDV0MaAIHwOIKQoktsiyjmOYPozj9ti0GEJI%2BQZoZvE3at%2FmPxIuLAQy%2B7fGg8YRsB2h1m%2FAlPzQ%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c893932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":851,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"1e0f8ea8b39c7c12501b0a0deda991a6","sha1":"3aaa0708283a38e0826e96f2e479acb5aa85e9c7","sha256":"a826a33f6fd1cebceeea5d5b559cb241a94110cf9dde6ad8af447513ecb4f6b3","sha512":"840d907a3886f59a19322989eee0345f67d297d8a6700da02ca377d982f130724198119917c90e70155d66fe19a9afc4ba37316073c4d1e6b8fbe3905cb9bfba","ssdeep":"","tlshash":"cde0cddda17bf6d54c47cb607d5d72c1608a1246254500deb043562465c93df7b85f50","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-07-02T14:25:44.111656Z","times_seen":700,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/trustwallet_bg_out.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.277Z","timestamp":1782862834277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/trustwallet_bg_out.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54270\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArOGLJb80pohtEBmT69Ou34xsVlZQQKIvgM0ixhuUKfTxTgEYjUEiWq3e0bahm%2F19uYaO2RkkpOnbRqDWoIESTHkyVlnflHbEURQBBrKRpou3ze1qhqFIu0TD4UPQQ%3D%3D\"}]}\r\ncf-ray: a141044a3cc132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54270,"size_decoded":54902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d993ded140645482be0caa9070143ca","sha1":"7283c2ed5f33469f3e05543bc31bae96e4e6e223","sha256":"c977fb933ae7a448898858959d376b1f9ec68dff5cc2a23539cace00914b5210","sha512":"017d87f4987af80a6b488099d5137eb218f4ad67fd181893b6929807e4bc2943d59fc50ba9807bab1413f2480232353438a2e6db5cf8716ce02da60d8df418e1","ssdeep":"1536:L6aKLrMVmfIRaANIUAzxf3DINuZZJgt5P83DeztCtGrXv:2y9RhGzpm8JOR83at","tlshash":"8233027b1e1a3b5ec95c9d70d109e43a050f1bc9bf076de355b70407117aea188af692","first_seen":"2026-06-11T16:29:30.450371Z","last_seen":"2026-07-02T14:25:44.112665Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/awards_clover_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.446Z","timestamp":1782862834446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/awards_clover_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64gMNq9phr%2BaOrjGAhP6W7tnj%2BcIaRa5KKN%2FKihmny%2FtY27Yju5yYUGQPTvw50TSC5eqlwH6%2FDoLgD%2BMKQWwMuhgsObH0tp313fYvV%2Bgvjn4OtAsll5DSwB38Swjgg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044b4f0f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5437,"size_decoded":3290,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a4fa9781759c6ec7bf6c679e335fa44c","sha1":"712fb2853f872b1326b23c3be0eccd7f774f353f","sha256":"5e825c9fa9a47ff20aaa82885912db5ab5b0bd7375be4cd8ca1fc407caf67f54","sha512":"bac661f04aa1991f5439d8103a32e445957bd2f2cc1d5bbbdaa376e4ce35e298ed36276873b821b05862d615094cae4ee558e8e83bc45a2cca1b5768378afb2c","ssdeep":"96:8n+TQmX0HdE8Eo3OVDgITAXJPzLqKq0GuH+5GDOwsjl:BdX09+o3SDSXJ7pe5GDGJ","tlshash":"74b1d8cc23b046f9f84bf7ecc6269890bd4320ae7590de78c27d6e405b51c644e99cc2","first_seen":"2026-06-11T16:29:30.353764Z","last_seen":"2026-07-02T14:25:44.098773Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/global/countries/pt.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.643Z","timestamp":1782862834643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /global/countries/pt.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84qhRdkVS66C%2BCg%2B%2FRKW0%2FYqn3CA6yedYtyXzWGLS21zebJ8oPxf6%2F20IE0KN2gIoGJbjZcdpZ1FPe9g5P%2Fb40UDbq%2BT8LOCwAy%2F%2BfAW1A03OwelbhWxh6NptFJ4QA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044c893132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":1399,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6e9db125513715df3ec213f701b912d8","sha1":"f0fbb6a6e5b7a068d28792280f397a4b879deeff","sha256":"3054e3bbce0d049b0ab3d157a16b24f7a572a7a45e73d342e3b7b8d5f28f0a4b","sha512":"06c04e06e44b97fc2b4379173dcaa7003f3cc5ed58db1697e0934f96878fc16928e08eef9a0be085cafd61b545718da8e8a7d8b456b57b194a51c1e22128c775","ssdeep":"","tlshash":"4a3174c9a335b0c24a17cfa87f2ef3c2044a67f8291c9884708ba90c3955bcdbac4d00","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-07-02T16:29:01.130454Z","times_seen":10662,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/_next/static/chunks/0nq1-.97-gsde.js","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:33.457Z","timestamp":1782862833457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /_next/static/chunks/0nq1-.97-gsde.js HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inYYkkLolK1bYi%2F7GGaRf1dvLZhWt4V4qR7JV3Q%2B1Pe3KyrnmzvBnSAO0tI0B2weyihc6NGES%2By7Qom6IaRyKmxn5cc9bvkIWfpqc9%2B8KfLURJ5e8j8%2FZPrEuB9XDg%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a14104451a0432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17179,"size_decoded":7817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17179), with no line terminators","md5":"7864538f9a43679ac76e408f43200221","sha1":"93cc5559c96d4bbe8f53dbac9056ea68695ef00a","sha256":"4a59e26c8de7d63d905eaa693c2fa7dcd3f9ae43ddeb67fee0564763342c362b","sha512":"ea28d67304756399c16e810dfe1623c6474758c83137fba87189c126b8ffe8a21c6da3156d8de5c8eae79a6308ba406aecf5eca6372550c77c90538a25ac9d93","ssdeep":"384:KgPN/B22tHVKCjpjtsFUjjvmz13hKW0KInG/as1e3:HP322tHAE526qJ0jG/543","tlshash":"38720a427498fdfa0b57d39cec6b8004b17e297ed98c80b98f6cdda0317594a7094f69","first_seen":"2026-06-30T23:32:44.712212Z","last_seen":"2026-06-30T23:41:03.631988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/avatars/14.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.296Z","timestamp":1782862834296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/avatars/14.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17240\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m24ohr5meg1Qk1wFwdDiQ3viHSmidTdWsbbyI3uQEaNQxTCOIeBUsdGro%2F6F7ESP4LgmF8rZumI1WWCKROaOBAz5NHB9V%2BxumlV3TvPqSrbJFo2qFIS0f64bjjn0ag%3D%3D\"}]}\r\ncf-ray: a141044a5d3132fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17240,"size_decoded":17874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9247d3c672f654dac24b345879ac9495","sha1":"da265cf72c1f4ca85353b29384403b7247eedc6a","sha256":"1e8b1df4869e1058e4165d6354c6920463b7e2e77ca1d54193dea9262e2a4937","sha512":"d7e49769e3b267883659334ec12f74cb6fd24f15c3fb4c3a94005b330f066329453f645aab55ef460401c18e4c23672c597b0d287affd844f58f99089f7eb749","ssdeep":"384:odpxH+3G9sC7tqft6K6aOamvb/qSBMG6o9RWgOl8jsY62PkKM8j:od7aG9t7tY6bdhvLZ1XkgO4s72sKM8j","tlshash":"9a72e1f852ceb0a1830eee53c33b17c9ef661c4d2365d652a7c8d3a93c3150b1b95980","first_seen":"2026-06-11T16:29:30.477099Z","last_seen":"2026-07-02T14:25:44.10343Z","times_seen":255,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/about/crypto_bg.webp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.424Z","timestamp":1782862834424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/about/crypto_bg.webp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/0fghvi7vx5udo.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3826\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAM%2FhOcCBIJ%2BBTDLE0broCwk5gPnu9TiBjk0S6ZOb0yPmMBiCsKeJxluHFH9%2BMo19qo3Fj24QnNdnN01u%2Fhl39rcAR91ImZZ6O055DNMCH9%2Ff%2Fmr8uav0CdH7%2F6UdA%3D%3D\"}]}\r\ncf-ray: a141044b2ec632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3826,"size_decoded":4469,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 592x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1cdc31b37aaa7ecd23f822ccc3d4686","sha1":"4cb4545fe65530070d0a13d2e599c7532597c034","sha256":"f84880011d8c6af1aec2658ce6fb0bcd86e0c38bdc98ff1ab1da5764844faae1","sha512":"e9ea731de3f9ffb27f8095e834ae5049c127b5752afd11f63a54cfa2600da25d3b6b59b44fc20d8cd3f9abfba19d793551e3935a83dc915da78afa9838242f85","ssdeep":"","tlshash":"6a816d4ac23338421c7736a188375467d045ed24d09ca1b62bdeb60fc64c377cda7472","first_seen":"2026-06-11T16:29:30.459808Z","last_seen":"2026-07-02T14:25:44.05599Z","times_seen":255,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/mainDSGN/mix/home/trustwallet_bg.svg","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.434Z","timestamp":1782862834434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /mainDSGN/mix/home/trustwallet_bg.svg HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cozywin.top/_next/static/chunks/090a6r7kb8eqn.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 500\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KA1Wy9bcoXfZeYtbREfPGo3Eyt101enlnKntOKDuYGAo0o1aj8mdz03O%2B0BmHFOffOloHX%2BJKkk9x1jJJu6TloqVMZTxBrZoLTrAihT6ebAD9FZ5rLi8mUyFROSYcA%3D%3D\"}]}\r\nlast-modified: Tue, 30 Jun 2026 23:32:13 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a141044b3eeb32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":1069,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a06363a3cd4efcc760d786a6b83281ea","sha1":"cb8ed03fc84a624643b2ebf6a048c87cba69bb84","sha256":"94a2a386817b82f41fdf8e90bbf962cf347638e4fcd2c86b716de00dc11871c0","sha512":"89d9ee2d7edea50e41774fcae527dc7befac77afa3b4e4311a212b85152dd388b856b435abe732791d6c6dc243645fedd22163f09b189a0ed0c37544956980b4","ssdeep":"","tlshash":"9311b1f456ec9513d208899ade0491155e2680d39e888155b14d7f5e7f1dcd34d13bc9","first_seen":"2026-06-11T16:29:30.324259Z","last_seen":"2026-07-02T14:25:44.114334Z","times_seen":255,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cozywin.top/api/extra/promoIp","fqdn":"cozywin.top","domain":"cozywin.top","tld":"top"},"ip":{"addr":"104.21.6.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cozywin.top/","date":"2026-06-30T23:40:34.030Z","timestamp":1782862834030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cozywin.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 18:25:33 GMT","end":"Sun, 06 Sep 2026 19:22:59 GMT"},"fingerprint":{"sha1":"67:74:E8:F9:75:C9:28:28:1C:52:39:AC:B6:C8:E3:74:C9:39:74:22","sha256":"C6:EA:E6:9C:06:75:3F:3B:C6:8A:17:95:63:67:00:05:6F:6C:BF:A4:BD:FD:19:78:A3:8E:FF:DD:65:D8:F8:3B"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: cozywin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cozywin.top/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 23:40:34 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjoBtuMc0nFomnrqXo75DMmRUS6WvjiX%2BN0%2F1%2BEyDTmCwor8%2BhR4z3vyk%2BZ77FV0lAhWRzV5lRBTOs0NZh%2FTrfKhQ0r22fgYYazR86nKX4fCsZkQpLuNd%2FT2miY5sA%3D%3D\"}]}\r\ncf-ray: a1410448b94b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":559,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-02T16:08:25.58061Z","times_seen":169923,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"cozywin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}