{"report_id":"148b777a-5fd5-489a-a4d8-4a558ebf8c32","version":6,"status":"done","tags":[],"date":"2025-10-11T17:59:47Z","url":{"schema":"http","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"172.67.134.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"title":"Sawinz: Most Popular Online Crypto Casino Based on Blockchain"},"submit":{"url":{"schema":"http","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"172.67.134.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T17:59:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"sawinz.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-11T17:59:49.191446Z","last_seen":"2025-10-11T17:59:49.191446Z","alert_count":46,"request_count":47,"received_data":3823440,"sent_data":21044,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/90681-e0e0870f516d501b.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dac6f6b1d8faadc4d700b79ca1e53ec","sha1":"9f29125f412adfc667c634971d7b0188351b87b5","sha256":"bf9ee1911e595c57dced00c2476061852f0b06ba94b6119203c8103c86c84e3e","sha512":"a97dd849efff48cc988aa3c0f55ecb7774f04c549c4786ebf620d94a4c88c84f49e000e5e9d73cef93ca9e4667271f841d4486352331951521f06241612ad394","ssdeep":"1536:JUcXlzyCdX5xmQPVpmsuhbJmvUv40MLsUDG3BZN2EaZxVcGR5c7dhP3Whj21mbcF:scCgNk","tlshash":"5004e7deb7a0a2f4f006e7f8d7165468366b39fe6e12ca28c3a91d15e90108cdd59dc3","size":181757,"data":"","first_seen":"2025-10-06T22:40:30.969987Z","last_seen":"2025-10-11T20:58:57.920418Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-04-09T02:53:38.715031Z","times_seen":22310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/main-app-fef4a8898ec7782a.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06acc17c28c2888a1a2466b0a0d12d8","sha1":"63d7278ad805cf6b27e6fb76daee100f7cc61afc","sha256":"90a949795e63ad10200d2f57df2706979fd66bd412caea2130a9c707e21c5d5b","sha512":"745f5cba8c1f8c006b2d9a1f8ec15fe3e66d7909766f446755243e1b63aa4d611233d9fa175bc9001bcbce4a4a782e79feb80846ba96f394b38c1ed2b1f3c2bc","ssdeep":"","tlshash":"f5f0fba55f0df42f5d266e74fd97ace2184f4275206b4e647d01dda23c67b6cd260408","size":537,"data":"","first_seen":"2025-09-13T11:18:32.65005Z","last_seen":"2026-04-08T04:44:39.423477Z","times_seen":7606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/75630-19622a1566a6d6e2.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"796047ff6df3ab28d1be8ac385e09f00","sha1":"b8c6558a182af483d37934b1595fea677128c919","sha256":"6d1cb48c3b55c0b3e33ae49a7ee24c2c998c195a35e6c93f91bdef8b58e77c66","sha512":"e11eb9c097805eb5f72d6b11255c4fb9b8462948eb041a365893b88a746ea6dff9d2fdcf35c1692ed387434e727399803a7a23183569387ecbef4e68a768752e","ssdeep":"12288:CW2sqZNSN87vIomx0wgH+vVWQo7AN3zoMaaql++gWuWUC4Qj8zINK3PyxSJSN87E:nNgvIh/ViNgvIh/Vx/cp0/cpo","tlshash":"7145b51cce6641fdaf14ac81ca4770658fe287432fd785ed9abb6e208bb159f4301e61","size":1274613,"data":"","first_seen":"2025-09-26T22:32:25.090231Z","last_seen":"2025-10-16T05:32:37.497804Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/95064-8ece3d2817a292cc.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1820ac6716b4d7fabd4dc1c1f875bf6b","sha1":"572e78286fc5400c9ae75eaf833f43b33d7374f2","sha256":"e10d260450467cac4102b28d0e25aff8e28aaf534178f2db835f27ffbf2e2dd1","sha512":"52e76827863a4baf602a24c2413c48cf40f80113c3d950c2f2ade8e9c77497de7207a1ce270d6467f01cb439d622efb0c06dff646581c420547ef8bbda8f43c6","ssdeep":"384:mTEzSMQjeMy1BHBB7V0BvDrXIwXJ+ba2YUSTNN8txdOTTpPNUp0icpUAHEvDBUgx:wEzSMEeMIvp0h08J+G2YnT76WM+HTY","tlshash":"0662a42e9175adf4f2526c689faea40c719f958a4b1648bd777cbd3000894ec3b137ca","size":15030,"data":"","first_seen":"2025-09-13T11:18:31.957785Z","last_seen":"2025-11-27T20:26:36.441914Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-04-09T02:37:34.52863Z","times_seen":84042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/twq.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-04-08T04:44:39.442652Z","times_seen":9412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/56060-33217506bf80ecc8.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f283284d1c21d419d8329c7fa8339e","sha1":"ad107376a8273f29071237e4bd0bfa9b40ad623d","sha256":"d30b2138e10cf81f05456a0a873b8e44a406e957828b86ce8e648e5dc29991b6","sha512":"66820fe9be474d9d61f2e53eb5bf1f44711a50e983fe3d2371731de71f9f5bb2c6891a7d753ed1a5cb74b65db59cef9aa1b717aaba7c4c6697d59080a65f8053","ssdeep":"192:/z6yhJjapm6LpZQizyySL4tLc6SriQhQ+YlzSifbd8Orq21OfeMAuuaUXCft+WVO:/zD3japmcxWySL4a6StYlzSijd8gL1y2","tlshash":"f13209c47260797e1543466fd0be551af27a29293c2ee25433b4c87cf921e89533bbe8","size":11446,"data":"","first_seen":"2025-09-13T11:18:32.238933Z","last_seen":"2025-10-15T18:27:16.322339Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/73943-6fa88f630b4203c1.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a07b1fd7280e37288d7cbb4daad89b61","sha1":"bbc0512ee2e5be52afb5e18fb4b5a2ddf819475c","sha256":"818c0484c940d1d960cd91672dc4496a422495c199932f13a576d9d9d8295b6e","sha512":"8a7068561e1a86dc6bfd94f9a54e6348b5546971761e7cb6709dede8bc5167a63173719366a3d75b12dc3372a4f71636b2c73e5fcdbb8afcac81a8f4e60e4f9b","ssdeep":"384:tFVImwEZN6tmulJ6e6mR+YVzbZe7bTaGexea0T5y+Kw974s2OwOgOTOcOUOjO/O4:tFVImwgNVuX6ebsYVzbZ2bTaGexea0TV","tlshash":"16b2b8a8939465dc7a491ba5ab1b146c2b3f527ab12c882eed4d04344046df8ff2bfd0","size":23635,"data":"","first_seen":"2025-10-02T16:43:24.098827Z","last_seen":"2025-10-14T22:28:31.326972Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/58211-e59dcedd404f9744.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"810fb7a950168b27aa0659d4337004e1","sha1":"497e5a447063b0a3f685c7102d63b9ddd37704a7","sha256":"9ecbc100da64c173314a8d8905245c6cc14eb19c991d9e7e092ad6208fc183ea","sha512":"96d931b83928f2f24b36d98e45e3137f50869b8dfb2a140e98ebb75684ea8eaef9ee245872df0fe67fd6c35c1b02f68e9c291dc951c732774670f05fdf214186","ssdeep":"768:dZE8vZ7iInPlFvvW5AvexG0rxVm1fr4UK1fWbqYsCL1fEntK+jBV9YCT:dpbWH","tlshash":"6a03a8866340a83d2583c16fda3a6455f3bf14eab92f939021daca7cf506dc0f5365e8","size":41140,"data":"","first_seen":"2025-09-13T11:18:32.040719Z","last_seen":"2025-10-15T18:27:16.282209Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bf7608a17aaff591a0429dbbee8403a","sha1":"f610f6648f24e2566907bb25ce1a566f02a6485a","sha256":"a518fd977f6781a241de8cc594e9edbc73be51cc6355f7d209dc214fb9245d68","sha512":"6f00d4f4cc5d8335ca9105709e7cd3563bb88948823487ae6d1c0e341ed4c6f2a46fb4a0a3caf979b6df6b12c4b408e45fd2b14ff5398387ad84687c41947052","ssdeep":"","tlshash":"29316a0eb608f8926da2cd0f42770e3388ccdc374379e1a8a54fe97b114697a5368c52","size":1809,"data":"","first_seen":"2025-10-10T20:35:56.954041Z","last_seen":"2025-10-11T20:58:57.930816Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8a15f9a20b0ccd294efe2e44826ed35","sha1":"56c0f25a4d82a2b4c8eec5c2f1540c1f7deb26d7","sha256":"0a290435f67824e287a48a7ba133958f2eadbfc5bc1ecb5b93000210d2b49a7b","sha512":"db57d35580e9751513d3c7590a8364bba50ba9f6a1870a4679a10abbb44b91e166cb7f4ba177b10a59b7c9e66ac998a25f934ff939486d5ec9fb578dd05fb6c4","ssdeep":"48:LZHExgIRoWnnBn6V0XI/pwJx0qEU6yUnBn6N/yhpbc0viOtoBCPgGCl:LptWBmXxwJx8UFa8opPoZh","tlshash":"7381f32e6806cd0bec7e7da9023e9c3650cdce7b47a1daf4858dcf581a468752bd9c81","size":4113,"data":"","first_seen":"2025-10-10T20:35:56.955371Z","last_seen":"2025-10-11T20:58:57.931473Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"224c32c04f29fe942fc4ff26342def65","sha1":"b8939aa03564032d008815f393160989648ffcf5","sha256":"e2a7819296a7229c536ce79a1f0cf3da93395c84d505acacc2b465d69ec24166","sha512":"0a36dc6fb2d2d0ede9a3d866d6d1e27e61dc1adeaed13597f052ba6a92aa63ac30d08dce78c7621d489c11b6a82e8160e77eb2fdc09db61d3c69bc07b8812972","ssdeep":"","tlshash":"c7d02b29a008ec5abc1a7846183dad3b104c00df0084dd6416c0ce040842a3a3302cc2","size":252,"data":"","first_seen":"2025-06-24T22:16:43.490632Z","last_seen":"2026-04-05T17:29:59.604336Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbd2f39962833ea69075c288660994a2","sha1":"3dcfb8a77d155f9a8068ad765a4ca0c4d4e536e1","sha256":"d1ba6fa6fc083c7326ea17bdd87c931a2504ba0cebe593e543fe90bb9ce37e15","sha512":"645bb7c27906889613c1f4b210156e1eb16d568f4a9d0e45d8c655b8ff37a63625828ca4eba5fed699b4904a12e5bd7759d87d7dd6d5ec506ba8cf0c9ca65d1c","ssdeep":"","tlshash":"86800474c4400c55c031405314341105017d440f00001700d351574470511055505dcf","size":34,"data":"","first_seen":"2023-08-27T16:27:01Z","last_seen":"2026-04-09T00:55:04.232335Z","times_seen":1204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/not-found-0fa271d6ffb20f44.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93ecb6022624ce28ad9d8d2a43c24f91","sha1":"2fbec1b4c0be7305744b1086ca02cb637c6cbee5","sha256":"0d3373bb825e3ad5ee92da0b34b14f76af00848dfecb8e9685e1640a8bf0f12a","sha512":"2225edb16d543e12acb04670df757efeaa39edaf9cf402f469164b68786cbcbd4d7b6e27a2c864b10c6da09746553413499a2cee67ef51d293c68b98bfdaa39f","ssdeep":"384:5FVImwsfz7uPrDqeNCsYANkRqDNgu4/jSRC5HZ9qYaUaGpHgRX3CpVpulAO5OFOQ:5FVImwIz7uPrmeNCsYANkRqDNgu4/jSi","tlshash":"61b2a56c93e415cc79490badab5b147c3b3e92bab564892dde4e1c345042cc8fe27bd8","size":24544,"data":"","first_seen":"2025-10-10T20:35:56.900374Z","last_seen":"2025-10-15T18:27:16.368511Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/58172-2e2ad5efca352ade.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9784916761bd2bbc76012952021d42d","sha1":"253cf85cec6b9a53b449d758e2d542a9a182bc23","sha256":"c0b7563919543117a0168d95e03a8812821df1f79a8bf094dadda24536660d92","sha512":"54d0abe66c6ec80868c406f1838ff8760bcae6758bd406c57e29d3ae842812ffb81cb315706c46e5d6a26e8bb80c7b1fc2787d02e360d635ebf22aad6c3c7431","ssdeep":"384:H74ml/FeOUGcg70p+tlof7VCEv/f2rVdVOmo778U/eWJV+o6:b4mldXUGZ0p+tl8VCEv32rVPOmg8UWWo","tlshash":"cb62a6d12b10495d3583ce7aca363929f2ef69ba393d57401168cb3cfd18ad4e6361e8","size":15156,"data":"","first_seen":"2025-09-13T11:18:32.621492Z","last_seen":"2026-04-08T04:44:39.471245Z","times_seen":7564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/34230-1997bfb44857faf0.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7589462deb5e26209096673b1582055","sha1":"e6e49476b1178289f9bac9095ef3082a04643175","sha256":"c94853b98d58e7db005ca68c05887385d9bf1ae35403efc6254e312eeb98401f","sha512":"9b2e49438a884776fcb5b488873f452fcc98bb9fea30a2de8bd382974f95daf3858179a7956c7267d8910ecaf20648443dd581927e021ee92965cbee9e550a14","ssdeep":"384:a2ae/t9qDM109qxJokKk9RqKIy7mK3I/AKIJ1L/oO98z/08zXvnL5/TzoaxG/QGX:6eVwDM10wxJMKIKIylIzIj/LKcKN/Pns","tlshash":"16a261c993905d3e2583c13fd634b426e2be19fb753a535021aac63df909cc0e7365a8","size":21580,"data":"","first_seen":"2025-09-13T11:18:32.000083Z","last_seen":"2025-10-15T18:27:16.331339Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/(auth)/layout-21ec38ef81635840.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeb148fc570d2378a9f4fb4cef9277e8","sha1":"f15bcc479e6192f1c27e2c50e9957c34d69e1dc6","sha256":"28e0352c26286fc5b9430539a76f6e36d0f8ade3679fef2b830ed3805fb8b690","sha512":"0d5e4e9dc24973836af109e4586ee36dfa759ed54863e94049c0c21323043a57cc61354a7d5016b098e269eaabf1fe4be8e76ac9b487c6fe54177f0e396d92c5","ssdeep":"96:XZ8Q2TeV9GCuyzz3qZqCLXx29Hn5G9UV3aQ+7XCrUBTCUBTVy19GCOsY89GC4b6:p8Q2TeCtiz3Xqx29o92d+7XCrUIUvV3g","tlshash":"70c1a5b7b6c5fdb2565688d088378207ba503d37205fb480a7facce53169dca44d1f8a","size":5634,"data":"","first_seen":"2025-09-26T22:32:24.049018Z","last_seen":"2026-04-08T04:44:39.435129Z","times_seen":7569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8a54b9b50498a32fbfb59e1884a7b62","sha1":"df28728948f3c8da6031e9802b5f536d407a644b","sha256":"8909386bef942e5624269e92ae881ce0d3cc7642d7dc1c8937b16bb29a1982e6","sha512":"e3de366d96d6aa001c741c8dd8c311a1b6575e4910b5e6e8ed5ef05161e2545ff277c70d3b77405b5f6e142aa3a67265b9ab092aecebdae9c43e322027a74431","ssdeep":"","tlshash":"d0d0c2a1dc12dc1dc3a60f29183b1c2a21cdc5a502095247e888c9785991a3409a09c6","size":277,"data":"","first_seen":"2025-09-26T22:32:25.094716Z","last_seen":"2025-10-14T22:28:31.448416Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/4bd1b696-ad7506e6ce5b48e8.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15510eac41ab1d5ef4d07adf66470336","sha1":"af7eb0a2168918b5999e83b71a10ba52809f38df","sha256":"e5b9e2570593ab1e59ae6a397baec8491e4c3d5e4628aa1439940ac0e2aee2fe","sha512":"116e3ef82cb1608f729f9731bf3ba61a1a75624fec0adf57d0536e5f7e1abae6c939e93af5bbde399079cc1634b5ffda250a76f08571d2e30c88eceecd05b22a","ssdeep":"3072:btfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:btfj2ld4Y40fUHQRE4","tlshash":"0df3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","size":168420,"data":"","first_seen":"2025-06-09T17:09:55.347659Z","last_seen":"2026-04-08T04:44:39.464442Z","times_seen":7625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/global-error-476ee618be04b5e6.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eae83d83f1d68c304e3fcc1425b6474","sha1":"2b3471e46097fffba0e29b68b68f7906b20bf124","sha256":"eae47141af6df4b5d8d2d8f03347e3611b43400ab0515b6377906304df73b391","sha512":"ef6b89ecef95c1b0b0d5916c921dd4e8ab60a6fea515b4bb398c9de53d40b16db649d6ba524a2b727d29917237e51acc4cc8be7ab610f07afedaeab7ad1bf6b9","ssdeep":"","tlshash":"4dd0978522403da878065aa998f4c831304500bb302dcceee333fe2108169b40382c0d","size":235,"data":"","first_seen":"2025-10-10T20:35:56.917585Z","last_seen":"2025-10-15T18:27:16.351344Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/53069-8194e2e836d2873e.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b76c9f9eb757b7e7d558b8a52c6dc17","sha1":"5fab78a66690858247f18756255ab758bfb1da4a","sha256":"0af82715eada111a7448037a1cb647f5af5d4ba9eefc503366b38280b38455f9","sha512":"dd62f7ffbf698b123d02c8321996352995273665ffb1a404d4a08a247565eeef616667686435de3f7506baa6b398b07803475f6f6e8d7b7ee96699dc28214d53","ssdeep":"384:GkECjOhNQuCIpYh1IWtfmU2Pvci4CsdkVr83RHCRnRZRja8UafVTQxt82:7TeNQJIpYPIWtfmU4vclCsdk9QHSRvje","tlshash":"b8620988a3a9a5d0f6819bfc970f603db56f21a59a02c864f7706d2070854cd7f56fcb","size":15671,"data":"","first_seen":"2025-10-11T17:59:54.060273Z","last_seen":"2025-10-11T17:59:54.060273Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/webpack-73978434126717c7.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf7856f59a6550709dd297e3ea5c58f2","sha1":"1fe51ea373af6b4a18d431566f24a71ed9e90eaf","sha256":"3f930f19255177d9c458356b803d590b35c832bbaab863969a8a19471cda898d","sha512":"ec752a1297765a1b1c7cd7f26425a5358c0c157415dd3acd166f91d24a0f331d8641a7cc5c4830f99ab36b9f8410ba7132de873cef3a8df0de5dfd2f41cb5230","ssdeep":"384:+LpsCLDiavHYqIc49SNjCOiat1zIqBmmB+wqqlqQY8F7TZ7KpfQH9BDMt:gcavrIf9SZIat10KowquZY8F7TZ7WfQk","tlshash":"5c824bbdb36cdcea2d3005c26c1760e4751871227c064ce1b1eae77600b6db5a76afb6","size":18254,"data":"","first_seen":"2025-10-10T20:35:56.922308Z","last_seen":"2025-10-11T20:58:57.902314Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/31684-b8837a619f76486e.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c9e1f9e9713d9d76f976369dac25760","sha1":"1d7cfa0fb89dd89210e337557ab9af8fcb9e7e17","sha256":"07adc3c304cb5798f2e26622c0215307b7b65a7f8bbb87a32f44832f781b75f4","sha512":"a34dc478e1f217f0cf2d8a2c291b933dfeb5121fd41a2f08f2ec3a5b526ca55babffd1358cf0b55ad15009821510b7f6ca9a66793931023d3910d85938ff1b0b","ssdeep":"1536:3Hk+1qVc+dJWgclHHlU0Zb8OeM8aZLoEAEuRaQ3aTcXH10nZAEUOW/oM+G6GZVsT:VqW+dJW9xAMiEuV36XZNGZm01A","tlshash":"5704b8b676d0f89107a780d5843b400af3395c3b146f74a0a3e6cce975645dea1b3faa","size":176018,"data":"","first_seen":"2025-09-13T11:18:32.512742Z","last_seen":"2025-12-06T23:52:39.117547Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/87870-6451c3fc59b300ff.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86bf4a31159e2a1d79b35247f8d9e72","sha1":"85ab43dc2776c452e2c5abaf0f3d7b74ddc4e6a2","sha256":"5865dd4f3887bef6ef3e5d68fbcefb1770ece32d77f332c8935507780d92b91e","sha512":"2f1997218dda62aa3d54586eca2939ed132927b4302d4cc929572256b8cd4c844076beb6051bb10fbd0dc1cf166d5492c5f81459828ce670fb552814fc22fa98","ssdeep":"6144:jw/lsfDuv+PuiUOuelr8jbGfjuNxC7dnE3Alr44Wu58wMQTMnTP8HJbt4KOHC5VJ:chiUOPRvICy3qKuVMDsJlVdodW","tlshash":"00151a0d8b9833f12fde3694364a4d3fe65db2749351c466a8d9e3aa118cce4503bbd8","size":947340,"data":"","first_seen":"2025-10-11T17:59:54.116514Z","last_seen":"2025-10-11T17:59:54.116514Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/(landing)/page-7bc6c6c50f98e018.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6099f04a9116e630f3c750e7e4d8ee95","sha1":"2228d450925ff0a6edc4a38e648521ace5c78307","sha256":"807f36d9b524cd5016ea681466c7bc58b18fb8c990a1ab46740717ca5565a6db","sha512":"bd353f1cbc46a34c0e5d112e32ef6010cd24294dc71f9f677a832ee7395aae6403ce5b99c363a460da4b43d4d222887c4cbe7d949872af05c4393b1c76a55cc7","ssdeep":"192:q5Zzf5/mJgzqME7a3IWnIgkJCArU/1WIF:q3zBOJF74IdoH","tlshash":"c9d102c1d214efe4f9f619ed912ecc1c326b2a46d7364db4f878785100481d87b5ab8e","size":6670,"data":"","first_seen":"2025-10-10T20:35:56.907258Z","last_seen":"2025-10-13T17:34:42.811543Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/layout-0c51675fe9dea466.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7e527e63d36f15fd269fe2a5cda9ad2","sha1":"776660476b4f6b3907176583467e945e3fbb7f00","sha256":"9738502f260c83b6c82ef1d25cc2ae9e77a1cf8968a47c6b90b832091a14b336","sha512":"851e303eadcbbfa33968505a09a9100db174f95064cabce308446bf1f850591920f8e44ac4a02eb89279b458b4fee934cc9fd97702c1a8df79cc7231e40becb5","ssdeep":"384:pqNXjjcin8uyf8VTsTknnxn4fFL1bNCxgg3V:pqNXkin8co8SOggl","tlshash":"ee6208a1b580fd3603678991d4fb4706b335493a6c1f9498b3a8ccd466b4dce41eaf8e","size":15734,"data":"","first_seen":"2025-09-26T22:32:24.269574Z","last_seen":"2025-10-15T18:27:16.438986Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/53331-b84ec44a66d742c9.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffc2a9646f640ee24bec96371d8896d5","sha1":"43fb84011d63dd3ee53c4c5a6ed7bee651bc780b","sha256":"ee75b3f83f6bb1fe59b15f18a040463973036c403110a597b3e77b659b240fc9","sha512":"19765f02ce6babd708e5a582fce2a697188168486b56c78f66d75c7ad4d29e02371f839d2b967fa8094e949f2fa6de2e478d24e24b3150f0eb404dcef6fe63f6","ssdeep":"384:/bEM6MGSQhbWOoOSQ6b82p7X4WsIBcf9CkSfA9CM3ORBq5T25iaTuJ8jFNDtv/LO:/L67hSOoe6h7X4WsIBu9CkoA9CM3OTq1","tlshash":"63b2d7e993f4b6e0a006e3f8d607a8793a6e19fd7b32c95893d95c20c5910dc266ddc3","size":23606,"data":"","first_seen":"2025-09-13T11:18:32.113392Z","last_seen":"2026-04-08T04:44:39.425213Z","times_seen":7556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/17288-14fdf683de80a7c3.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"979f48e11e2403b2e6bdcad0ab1cbdce","sha1":"056102041f5b0f15715c6e3ed4ecef8fa42c6c58","sha256":"0ea2494a8eec25d9cbda5cb2d731bce936cea379bf80cfdd3a77b56b9c998329","sha512":"f6563f0b5a8001b0781dc75c380292f2ad8b99f8c623180a7b9c4a579290a88e5a56e560140d214c47e26dbb22ade8a0fa14035b5bd18fcfcf87850b2a645a0d","ssdeep":"384:6SXQPsrRM3IawoFSyqD/ZyWRqtG2ZLdq0qBz6dqJbZQu5we624W66unRupy4Gj0W:2YaQDFxsxqlu8bZQu5S5jNjD8W","tlshash":"9ad2c7897a91f03c5293e555c63f500af26b1da8741ea9d4d3a7c9f8bd7888d8133a3c","size":29509,"data":"","first_seen":"2025-10-10T20:35:56.934105Z","last_seen":"2025-10-15T18:27:16.399137Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/fbq.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-04-08T04:44:39.468811Z","times_seen":9415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/dc112a36-4dd9553e3950a789.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b0312e3e2ff7226227ee081f6693db1","sha1":"823c7003795d9623f8992900a6f337f599bb7eda","sha256":"dccd0125f7ca7c6c5f3f8ae7d813743257cb55899fcab2d63b70fdf06b2a05e2","sha512":"612eb966b9409ee719588a9f82170d4d6c9b5c075b85981a1ac0dc0fb8119997de7f6a139ba2908d7ccfe0ab342f452e39ca15ec3d9fafdc1c2a7d36cda06d87","ssdeep":"3072:Hbyz4KjrqQmINGbpJGDc0Lf1c/X6Rpbdt0myoQj7sOU1IMi9wD5yojt:HijOQmINGbpJGDc0Lf1c/qD0erI5BEt","tlshash":"295419597254343805c540a9906f094bf736292e246ac49cb36cf4efa8bdecd31beb79","size":305838,"data":"","first_seen":"2025-07-19T01:07:13.417114Z","last_seen":"2026-04-08T04:44:39.432394Z","times_seen":7614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d1cb1437390ae901586e4c93430cb0a","sha1":"9aaaa27f9977a0564c120364aec373408693789d","sha256":"8d4adf423718cf02dea644c05027e2b113d0bf402e27d3dd5b664d39bc3051a8","sha512":"3fb3784bfef0a7ff45ddf4b411e62677d78d31efcd95917fa5633502f2e5b149f8c6220c68800bbc8e2b9feb6991d4afb2749ea3a9e7558c19a85f1299a6d7bd","ssdeep":"","tlshash":"b3f09762ac00e91384b60e912cbc8d6421cc843b82401aa9aaa5ce2e154b17cfa73991","size":460,"data":"","first_seen":"2025-10-11T17:59:54.119691Z","last_seen":"2025-10-11T17:59:54.119691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/4bd1b696-ad7506e6ce5b48e8.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-ad7506e6ce5b48e8.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7NAepUy4DHQaozhlm7ULoIu7L99Td4V4OkT47LCXVQUln5kSpu0aYRTjuOA44ntb%2FjE%2Fi1XzU3wXvtSYpscUoOrrYle9wecGJQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c13c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15510eac41ab1d5ef4d07adf66470336","sha1":"af7eb0a2168918b5999e83b71a10ba52809f38df","sha256":"e5b9e2570593ab1e59ae6a397baec8491e4c3d5e4628aa1439940ac0e2aee2fe","sha512":"116e3ef82cb1608f729f9731bf3ba61a1a75624fec0adf57d0536e5f7e1abae6c939e93af5bbde399079cc1634b5ffda250a76f08571d2e30c88eceecd05b22a","ssdeep":"3072:btfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:btfj2ld4Y40fUHQRE4","tlshash":"0df3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","first_seen":"2025-06-09T17:09:55.347659Z","last_seen":"2026-04-08T04:44:39.464442Z","times_seen":7625,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/58211-e59dcedd404f9744.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/58211-e59dcedd404f9744.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bM40uAT5Vvx%2B8hgubHimnOsDThmRfm522I%2F9Bmg%2BAFrqjwBiRcTlJ1TYIn4ofvul8kLjslD7vJSa3uGZVsmxDK7de1DhEsTd%2Bq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c39c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41140,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41140), with no line terminators","md5":"810fb7a950168b27aa0659d4337004e1","sha1":"497e5a447063b0a3f685c7102d63b9ddd37704a7","sha256":"9ecbc100da64c173314a8d8905245c6cc14eb19c991d9e7e092ad6208fc183ea","sha512":"96d931b83928f2f24b36d98e45e3137f50869b8dfb2a140e98ebb75684ea8eaef9ee245872df0fe67fd6c35c1b02f68e9c291dc951c732774670f05fdf214186","ssdeep":"768:dZE8vZ7iInPlFvvW5AvexG0rxVm1fr4UK1fWbqYsCL1fEntK+jBV9YCT:dpbWH","tlshash":"6a03a8866340a83d2583c16fda3a6455f3bf14eab92f939021daca7cf506dc0f5365e8","first_seen":"2025-09-13T11:18:32.040719Z","last_seen":"2025-10-15T18:27:16.282209Z","times_seen":80,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/53069-8194e2e836d2873e.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/53069-8194e2e836d2873e.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3rq9MBUAfONUueoYdZz9rafEZ9Et63bSd1rFR1KTc6d6YEoqcfrJOS4gH7%2FuNVNIIYbih2PnEG7FxECxU642D%2FCiItaoVAhuow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040466c62c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15671), with no line terminators","md5":"2b76c9f9eb757b7e7d558b8a52c6dc17","sha1":"5fab78a66690858247f18756255ab758bfb1da4a","sha256":"0af82715eada111a7448037a1cb647f5af5d4ba9eefc503366b38280b38455f9","sha512":"dd62f7ffbf698b123d02c8321996352995273665ffb1a404d4a08a247565eeef616667686435de3f7506baa6b398b07803475f6f6e8d7b7ee96699dc28214d53","ssdeep":"384:GkECjOhNQuCIpYh1IWtfmU2Pvci4CsdkVr83RHCRnRZRja8UafVTQxt82:7TeNQJIpYPIWtfmU4vclCsdk9QHSRvje","tlshash":"b8620988a3a9a5d0f6819bfc970f603db56f21a59a02c864f7706d2070854cd7f56fcb","first_seen":"2025-10-11T17:59:54.060273Z","last_seen":"2025-10-11T17:59:54.060273Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/fonts/proxima_nova/stylesheet.css","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /fonts/proxima_nova/stylesheet.css HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/_next/static/css/0cbdc65dc9825597.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSvAWX7Zg4lD2s5afN72kKg0q6b7RfB7XmKEVyOOEBkGaZwLSOusqY%2BzYD%2Fkmij%2FsDM6U4F8rY7T9WVB%2BUDjCGfhKZU9egqpSzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040470de5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16610,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"673fa97a88bfa20fe973f673a53b3eb3","sha1":"76e3dba5dcfc59e2743f9e311f00af3713558911","sha256":"c95004c3ccd349ab98e3399fc906b32ff9175ada6c1f8c96eaa33e2f11cd1a6d","sha512":"c50ee40dd523a9d412e32e2fd7dead904f4db96155ccdf0966b597f4c5b58040616fbe64f27a5a525761d3221bfd8a8a77e7512e793991ccd6ba803c8f966aa4","ssdeep":"192:Yz6b6dlmqgqYGVNCGAcCh2H5vwCGmhRgSem0pBjqkCY9WTpnOPx/OSW9r0tZxjyL:0aG7KUC4ZYCrz2muZHCfWctAH/uNB22","tlshash":"e0724942cccdbc624aa6148077fe6ff60b4e28559079ad57ff3c38389d115adc68472a","first_seen":"2025-06-28T14:48:13.079962Z","last_seen":"2026-04-04T23:26:43.773976Z","times_seen":6952,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/bg/preloader.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /bg/preloader.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/_next/static/css/0cbdc65dc9825597.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KfEPfbE9%2BRuNmkcoUiS9mUu9G4mVeYDrEqSs0upODs%2FF0RDG9LqUKCp4eFeVMnwd7lBcD5Uzm5jZOuX2tEsp49W%2Fzi29YgFMHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d040483941c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d4cf0d8e07d5ff0a22dde176b5e6926c","sha1":"bb3f41bbc80202459f3bd9a27054f855523f8ea7","sha256":"caa934ceb360955e8ef4eae0984d9ee475137fa2eee2b013586e25461bc1703d","sha512":"03fa93b18e1610abefaaeee02782234d164bd6de0d27aff61c5aa02e260d50e0b69233306e46bcabac18c6de2ce085a5859bd4ee71c2480acb0e4a719a3c5123","ssdeep":"","tlshash":"703122c04abc425cf604a6a9cf122875be1a64ce578564baf3ce9d06935805b8e0299b","first_seen":"2025-09-13T11:18:32.012309Z","last_seen":"2026-04-08T04:44:39.451541Z","times_seen":5868,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/api/extra/pixel","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sawinz.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JWRpvRWlRub4V5Lz3hpC9P3fgf0RpN3jJx7hhZbeMXIGWlzxF2ZNvIJiSqKZSlSO9ijAJwdU1TqmppaxuT238cTN5cSrtwIKtg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0404c6c09c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ece06bda1f39f09b81a96f5e72c3398d","sha1":"d802ed2ed0be55b340119edfca012f6973e00efb","sha256":"1323a699dea86a9a4a43038c6bf6693a5a0fe6a8d718178152bf18cfc49bafc6","sha512":"abb6d524526a88b5802bfc56e0bbebf9afbe452ce655f99127e58286b58e6e8c805818aa8978850a6207847fbe74180957fac74e49cad1a7531dff3d5b792ef4","ssdeep":"","tlshash":"87d0c2b303b145615e479201ac71ff589c8d065a0f01666ecfa48314426c8f22cc5b98","first_seen":"2025-10-11T17:59:54.067739Z","last_seen":"2026-03-16T23:37:16.211553Z","times_seen":28,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/css/3e78acc7e7777158.css","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/css/3e78acc7e7777158.css HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5pQPrkdnc7%2B6XhBrVcgt3PBQS1qzFtvO4Ho7mAINsTXrsZxBoc%2Bb04%2FyCBAG6hXkifoU%2Fm9lcCpP%2BoohKIg73r2ZGehoEaaObc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040463c06c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74276,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3fe0f418812d7666442dfbe3606fcffd","sha1":"3c8c4f8001c435d6bcdffd4e3c9e64e5229e1322","sha256":"c407369acb23a5fc68308aa4173424eb1c763813b330b1748e820df6c347b04d","sha512":"dfac48347429b317ebdfd62399446c890949b11cfc2811a8f582ea362617c57f30fac8cf6f4dc00dd666e1e6bae7890254b6b981006a9449f13e7e4eaf441dcc","ssdeep":"1536:9Wr9u1kzyfV8n/+d3owM+nnqxFiDsyod800:9Wr9u1RA/+d4wMlM","tlshash":"da73b7334234a53cb6a7d422b5d45ace312ac543aa731aedf559bd3980c72d33b63788","first_seen":"2025-10-10T20:35:56.919845Z","last_seen":"2025-10-11T20:58:57.924574Z","times_seen":11,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/56060-33217506bf80ecc8.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/56060-33217506bf80ecc8.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:23 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbfu7QkVVRTYnLCRALyMsvBxMQ7eJ0H1nk0JUoSc1Spj06tZgbjFFROClPRBx5rfxM7Ks3vXcwV7s%2BAcCKDY2I40NAvyJyki%2F7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c21c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11446), with no line terminators","md5":"15f283284d1c21d419d8329c7fa8339e","sha1":"ad107376a8273f29071237e4bd0bfa9b40ad623d","sha256":"d30b2138e10cf81f05456a0a873b8e44a406e957828b86ce8e648e5dc29991b6","sha512":"66820fe9be474d9d61f2e53eb5bf1f44711a50e983fe3d2371731de71f9f5bb2c6891a7d753ed1a5cb74b65db59cef9aa1b717aaba7c4c6697d59080a65f8053","ssdeep":"192:/z6yhJjapm6LpZQizyySL4tLc6SriQhQ+YlzSifbd8Orq21OfeMAuuaUXCft+WVO:/zD3japmcxWySL4a6StYlzSijd8gL1y2","tlshash":"f13209c47260797e1543466fd0be551af27a29293c2ee25433b4c87cf921e89533bbe8","first_seen":"2025-09-13T11:18:32.238933Z","last_seen":"2025-10-15T18:27:16.322339Z","times_seen":81,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/34230-1997bfb44857faf0.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/34230-1997bfb44857faf0.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jiiIZg7nYWJvTtPb%2BZbj928SA4AhfQMtTJZzPObSPJqkJ0kNBnzIb0pDF4ss4t0qe%2FE7dCoayFkVDykx%2BfNJ%2FDFt9t%2Ff7ExEwoc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c47c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21580,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21580), with no line terminators","md5":"a7589462deb5e26209096673b1582055","sha1":"e6e49476b1178289f9bac9095ef3082a04643175","sha256":"c94853b98d58e7db005ca68c05887385d9bf1ae35403efc6254e312eeb98401f","sha512":"9b2e49438a884776fcb5b488873f452fcc98bb9fea30a2de8bd382974f95daf3858179a7956c7267d8910ecaf20648443dd581927e021ee92965cbee9e550a14","ssdeep":"384:a2ae/t9qDM109qxJokKk9RqKIy7mK3I/AKIJ1L/oO98z/08zXvnL5/TzoaxG/QGX:6eVwDM10wxJMKIKIylIzIj/LKcKN/Pns","tlshash":"16a261c993905d3e2583c13fd634b426e2be19fb753a535021aac63df909cc0e7365a8","first_seen":"2025-09-13T11:18:32.000083Z","last_seen":"2025-10-15T18:27:16.331339Z","times_seen":80,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/75630-19622a1566a6d6e2.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/75630-19622a1566a6d6e2.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8o9%2FbZbvoVpeeLjH582OSWLzeEHYgqR5wVz2RmSHyxaA4svek5ncYUnHHS%2FDbqRpxYiTDJ5LoMj2ZUgg1uK17s%2BYC9E08Kb7vpY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040466c59c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"b8e576ec598cd9cf3d67421a4e0194fd","sha1":"236355072748e5e7a58fc5e4e401e73885298c54","sha256":"c4afe6f102af2cb8bd4099b400da4458ad7fe8de1ff69cec2dff9ab02c9b4b82","sha512":"fdf0df31b4d750af87d58e47c7f8f84336f320cba79e44e06017952ad6ad427a0e14cf56a4523edfb5762f0f2eb3b5a8d9dbfad2953db287d5d56c5ec3bc2e2a","ssdeep":"12288:CW2sqZNSN87vIomx0wgH+vVWQo7AN3zoMaaql++gWuWUC4Qj8zINK3PyxSJSN87S:nNgvIh/ViNgvIh/Vx/cpg","tlshash":"a525831cce6641bdae14ac81ce8770658fe287431fd785ed9abb6e208fb158f4301e65","first_seen":"2025-09-13T11:18:32.172793Z","last_seen":"2025-10-16T05:32:37.307024Z","times_seen":80,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":702,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/favicons/greenColorDSGN.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /favicons/greenColorDSGN.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfEymbGd0LSOp9N08QQdECoYjZbLIrqiK6%2FYR%2BgzSOOob0nVk%2FQ1vASTOLF45z7JH%2BXyYoEXSoWCd8fYuZwSyA2vCy%2F%2FCRatqbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0404ae86dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-04-08T04:44:39.447842Z","times_seen":5855,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/api/extra/promoIp","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sawinz.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJPyjJVg2cB3CX3kg97VkzhEDcOynGDCvVTow6yEQZ37cw8cv9IvIkFGmIzZWbIzwGYXy7PR%2BIDEntYQbR%2FTbmbYdyw78nFlso0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0404c6c13c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-09T02:39:21.563075Z","times_seen":117355,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/logo/girl3.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/logo/girl3.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/api/extra/promoIp","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sawinz.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AU8n4CezeK0Ggi7t%2BPQfk0%2BFzqQN7QxqeN0S22CkJKkKXAXxhR8baYRJqzjbX%2FvnZfJwtHJGOXPlOeTcQAh7NnlGINaRCSAhZdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0404dbf1ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-09T02:39:21.563075Z","times_seen":117355,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/main-app-fef4a8898ec7782a.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/main-app-fef4a8898ec7782a.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVrRP2zQEWT3QeMdBPgMOK4dziOaFq6DStvOsSSqTefaNJi%2BIEbmMxM%2BOZeRjIcEVTI8O%2FVgIxsxOqgu1TeFUnwfPsYDQiB3hPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c1ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":537,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (537), with no line terminators","md5":"c06acc17c28c2888a1a2466b0a0d12d8","sha1":"63d7278ad805cf6b27e6fb76daee100f7cc61afc","sha256":"90a949795e63ad10200d2f57df2706979fd66bd412caea2130a9c707e21c5d5b","sha512":"745f5cba8c1f8c006b2d9a1f8ec15fe3e66d7909766f446755243e1b63aa4d611233d9fa175bc9001bcbce4a4a782e79feb80846ba96f394b38c1ed2b1f3c2bc","ssdeep":"","tlshash":"f5f0fba55f0df42f5d266e74fd97ace2184f4275206b4e647d01dda23c67b6cd260408","first_seen":"2025-09-13T11:18:32.65005Z","last_seen":"2026-04-08T04:44:39.423477Z","times_seen":7606,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/87870-6451c3fc59b300ff.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/87870-6451c3fc59b300ff.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAlzxc%2BS76Wgt%2Fnvi4%2Blp6XAW5W0I9btbgu%2B5E7avcXfO1aTP%2FWSR0WO5NuA8NCemUrKUQ2D0Swob6YUkgUpKmFhSt4PWgzpyBo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c23c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":947340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65352), with no line terminators","md5":"8626afb2fb987acfb33febe2f22c869c","sha1":"09f471121bc76292920be8d702661d821c45235d","sha256":"414623a178c0372c7122b665bedd8ed6409d6c3215271e060db3b230cc72cf1c","sha512":"59924f1516d13411e04a9535feb9574f98b9f647fd9ff7201c3af5962ccbb55ef36d18829a106d452da07822d207b8ecf2f8232f20f30ae837270e6584c238b0","ssdeep":"6144:jw/lsfDuv+PuiUOuelr8jbGfjuNxtE3Alr44Wu58wMQTMnTP8HJbt4KOHC5VdgYz:chiUOPRvIK3qKuVMDsJlVdodW","tlshash":"34351a36854917fa2bf331943ad667aaa18e8214c3d4f6dff0e5b119118fcd4902daec","first_seen":"2025-10-11T17:59:54.077774Z","last_seen":"2025-10-11T17:59:54.077774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/58172-2e2ad5efca352ade.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/58172-2e2ad5efca352ade.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TazpI7s%2BuqOOPWqwAkzMKjeb2SaK2IZAERafe4ihVJgav%2B2nF39sSLruPM03bQDJskKID2%2BVDBqdE2R7f3q8okzr9DOVHyTGmrg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c42c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15156), with no line terminators","md5":"a9784916761bd2bbc76012952021d42d","sha1":"253cf85cec6b9a53b449d758e2d542a9a182bc23","sha256":"c0b7563919543117a0168d95e03a8812821df1f79a8bf094dadda24536660d92","sha512":"54d0abe66c6ec80868c406f1838ff8760bcae6758bd406c57e29d3ae842812ffb81cb315706c46e5d6a26e8bb80c7b1fc2787d02e360d635ebf22aad6c3c7431","ssdeep":"384:H74ml/FeOUGcg70p+tlof7VCEv/f2rVdVOmo778U/eWJV+o6:b4mldXUGZ0p+tl8VCEv32rVPOmg8UWWo","tlshash":"cb62a6d12b10495d3583ce7aca363929f2ef69ba393d57401168cb3cfd18ad4e6361e8","first_seen":"2025-09-13T11:18:32.621492Z","last_seen":"2026-04-08T04:44:39.471245Z","times_seen":7564,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/95064-8ece3d2817a292cc.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/95064-8ece3d2817a292cc.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PE4xOVB%2BFhjGWgdoWaXvQbkgULrBCcshFNIA3583dVT3pmj%2Fs7UfqN3syPuGB115Yd9cwizuWP7AXQB5uEK4Vfpk8VqjFiEmok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c53c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15030,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15030), with no line terminators","md5":"1820ac6716b4d7fabd4dc1c1f875bf6b","sha1":"572e78286fc5400c9ae75eaf833f43b33d7374f2","sha256":"e10d260450467cac4102b28d0e25aff8e28aaf534178f2db835f27ffbf2e2dd1","sha512":"52e76827863a4baf602a24c2413c48cf40f80113c3d950c2f2ade8e9c77497de7207a1ce270d6467f01cb439d622efb0c06dff646581c420547ef8bbda8f43c6","ssdeep":"384:mTEzSMQjeMy1BHBB7V0BvDrXIwXJ+ba2YUSTNN8txdOTTpPNUp0icpUAHEvDBUgx:wEzSMEeMIvp0h08J+G2YnT76WM+HTY","tlshash":"0662a42e9175adf4f2526c689faea40c719f958a4b1648bd777cbd3000894ec3b137ca","first_seen":"2025-09-13T11:18:31.957785Z","last_seen":"2025-11-27T20:26:36.441914Z","times_seen":547,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/cubes.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/cubes.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/mobile/girl3.jpg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/mobile/girl3.jpg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43007\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 11 Oct 2025 17:59:25 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mwq7Z%2B1HEHjZh9LUbYCmA8le%2F7kvEUOBBXDXwWpojALUAE%2BqL8GEuCdNm2VRNWCldb2l3twEmy1WmYjMOgpWuPCsrAPteeFpspw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0404d8ebfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43007,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1346x558, components 3","md5":"7f4c124c2bbf15136e6511a429ee87f8","sha1":"3d5de4091ddcef5a5e586808c6b917cc4e073bd5","sha256":"74146b65356584d7a4c0a2adc81a08e830968f1c203a8b54b8b4733b26e99587","sha512":"061da1bc3e78b24b81b84be433966f87c776ca7f094b84624d3ccf87206983c7249e0c19dde1a780ce2b902a9c8874601007a4d8a43034a6ef0e2a8bc1d5e3be","ssdeep":"768:pHqhn9OABRMLJ0neKYFzMkD8LXoymk4Wy/u0oSn2lauIpUsDpy7eNUaSw1+9:pHqg1MeKmtuXobWy9slTIpUsyD8+9","tlshash":"e913f11e30a9f58ec13846b441c6d7306f88dae7e78f6a5156e7a030ec50c71adb76c9","first_seen":"2025-10-11T17:59:54.081941Z","last_seen":"2026-02-05T14:02:16.000398Z","times_seen":41,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/90681-e0e0870f516d501b.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/90681-e0e0870f516d501b.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FenU%2BpjeDznz5HpAlFkkD5Dn1PezQ0bKQdJo6MJfzX5%2BTYUWpr%2B2sHI8fDr1i%2FueL3ZG95%2B98CGSQtj1ZWO6ZT1EWQpe2fNeET0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c49c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2dac6f6b1d8faadc4d700b79ca1e53ec","sha1":"9f29125f412adfc667c634971d7b0188351b87b5","sha256":"bf9ee1911e595c57dced00c2476061852f0b06ba94b6119203c8103c86c84e3e","sha512":"a97dd849efff48cc988aa3c0f55ecb7774f04c549c4786ebf620d94a4c88c84f49e000e5e9d73cef93ca9e4667271f841d4486352331951521f06241612ad394","ssdeep":"1536:JUcXlzyCdX5xmQPVpmsuhbJmvUv40MLsUDG3BZN2EaZxVcGR5c7dhP3Whj21mbcF:scCgNk","tlshash":"5004e7deb7a0a2f4f006e7f8d7165468366b39fe6e12ca28c3a91d15e90108cdd59dc3","first_seen":"2025-10-06T22:40:30.969987Z","last_seen":"2025-10-11T20:58:57.920418Z","times_seen":24,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/53331-b84ec44a66d742c9.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/53331-b84ec44a66d742c9.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1xOEqz0EFrBhxSp9a6NgRf4nQrwJMyo8sEjZUiGr%2BKKfa6vy9bo7924X%2F%2BStOumGaKmmGeNqDqWUewJ9qBX8%2FHG3QbW4%2BN1v3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040466c6ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23606,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23606), with no line terminators","md5":"ffc2a9646f640ee24bec96371d8896d5","sha1":"43fb84011d63dd3ee53c4c5a6ed7bee651bc780b","sha256":"ee75b3f83f6bb1fe59b15f18a040463973036c403110a597b3e77b659b240fc9","sha512":"19765f02ce6babd708e5a582fce2a697188168486b56c78f66d75c7ad4d29e02371f839d2b967fa8094e949f2fa6de2e478d24e24b3150f0eb404dcef6fe63f6","ssdeep":"384:/bEM6MGSQhbWOoOSQ6b82p7X4WsIBcf9CkSfA9CM3ORBq5T25iaTuJ8jFNDtv/LO:/L67hSOoe6h7X4WsIBu9CkoA9CM3OTq1","tlshash":"63b2d7e993f4b6e0a006e3f8d607a8793a6e19fd7b32c95893d95c20c5910dc266ddc3","first_seen":"2025-09-13T11:18:32.113392Z","last_seen":"2026-04-08T04:44:39.425213Z","times_seen":7556,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/fonts/proxima_nova/ProximaNova-Bold.woff","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /fonts/proxima_nova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/fonts/proxima_nova/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 52068\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjNz%2FFgNoTlS128bvnAMcSCwqWNpujBIbhMwNk9Fh0tWquFoMllr%2F1P%2BzvqlfL4%2Fwd5scG%2FZxsB8yQRrzOZ%2Fpij1QeTmjiPfIl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040483957c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52068,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-04-08T17:19:19.863467Z","times_seen":8466,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/api/mammoth/auth/check","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:24.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /api/mammoth/auth/check HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sawinz.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqwzmGLw2LtmvZQX2qBZg8EKusdg5iNe%2BJ5BBEZL%2FD81D6MyzScutgOOn2C82DPOQ%2FK4CEg%2FpnMZUljw0cHsEGHGrYOxp1W0YUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0404c7c57c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aced0d4c1bf7b416bd8757e86c69b12e","sha1":"242609e9dc75daa64e55af8d8254cdc02722ee92","sha256":"831690950d50aa783757553ff7dce0e549b2bf0c29fcc850ee8ef7a7f6bb54fa","sha512":"8c854561d71566fbd9d1e18c91f1bd391cbedf2b2e8b52d84205d4f773f36b14bfd5d3ca2cba9f5a300b8d96b025ab3eee5d5e3a19985e78386e04584e24d0b3","ssdeep":"","tlshash":"8d80040115000173f4001144113c1d115c54533745410014fc7cd0c4c7530d53043c17","first_seen":"2025-09-13T11:18:32.558363Z","last_seen":"2026-04-08T04:44:39.458663Z","times_seen":7317,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/twq.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /twq.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYB6iVfy9UqdgR0oUPeI9jBLRTCrJGQ0QMQw0grmKNasvSSv1Y9jzHaXaPZeKkGY0aHomTRL8m1al2aVt7pVSdF1dUfmJhmCfOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040467c91c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-04-08T04:44:39.442652Z","times_seen":9412,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/css/762f8a6ab0b1e383.css","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/css/762f8a6ab0b1e383.css HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9%2BHpcTGiMv5%2FAqYuHP9EKaZneTfnC97Z9J1Nxmk2muKcQfxO1M46JJcsNRX408FHvtHdHEKzxclkKWU6PABLuU05D45vLn%2BFXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c0bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32734,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (32734), with no line terminators","md5":"52ca6818a3ae80bb61d6c91babcd79bd","sha1":"9b22ca74928a233c31f4c710e3721b7a9d0a5897","sha256":"15e549e2c8ed1d8eeb261da3a4c7385b3273ed3af1c49be19778f9bc7356f376","sha512":"b9eb13b285bf17c9cf8810b924a02817a8779365b0c914437c29068cbd4937d2e633f713bf6ca3703768ea79d9c97bf104f60d9c395e540767f64078a06a0353","ssdeep":"384:ujjG5yVATipbkxh6X31is4c2khffIg+YpXWeMoo7lsH2wVZO3z2IgMrLA+kt8/N+:uvG5c5P4NVN/SOIcqH","tlshash":"b6e274625335b23cf477d98635806edd30648b1796339afae492a43dc0c7ae2276738c","first_seen":"2025-10-10T20:35:56.926304Z","last_seen":"2025-10-13T17:34:42.781522Z","times_seen":28,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/(auth)/layout-21ec38ef81635840.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/app/(auth)/layout-21ec38ef81635840.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8pvLtE1iU0u123jHmTPRGfV2VuhiVcKPRuYlZqunaA%2FrJvRzuUk6A48DqX8d87JviYEXr%2FVUwrO44aIjGEKRQXWe2Mz52gDCMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c2ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5634), with no line terminators","md5":"eeb148fc570d2378a9f4fb4cef9277e8","sha1":"f15bcc479e6192f1c27e2c50e9957c34d69e1dc6","sha256":"28e0352c26286fc5b9430539a76f6e36d0f8ade3679fef2b830ed3805fb8b690","sha512":"0d5e4e9dc24973836af109e4586ee36dfa759ed54863e94049c0c21323043a57cc61354a7d5016b098e269eaabf1fe4be8e76ac9b487c6fe54177f0e396d92c5","ssdeep":"96:XZ8Q2TeV9GCuyzz3qZqCLXx29Hn5G9UV3aQ+7XCrUBTCUBTVy19GCOsY89GC4b6:p8Q2TeCtiz3Xqx29o92d+7XCrUIUvV3g","tlshash":"70c1a5b7b6c5fdb2565688d088378207ba503d37205fb480a7facce53169dca44d1f8a","first_seen":"2025-09-26T22:32:24.049018Z","last_seen":"2026-04-08T04:44:39.435129Z","times_seen":7569,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/17288-14fdf683de80a7c3.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/17288-14fdf683de80a7c3.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNejFU5W5%2Ba5Fe7iufljj%2Fx9mSjBh5pOZT7ks1P1pX4uA8u0qOj4c8p4TbjJ70iiHP4tSRY1fReTxGte63zKwTQjXBV8Mq8trSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c3cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29509), with no line terminators","md5":"979f48e11e2403b2e6bdcad0ab1cbdce","sha1":"056102041f5b0f15715c6e3ed4ecef8fa42c6c58","sha256":"0ea2494a8eec25d9cbda5cb2d731bce936cea379bf80cfdd3a77b56b9c998329","sha512":"f6563f0b5a8001b0781dc75c380292f2ad8b99f8c623180a7b9c4a579290a88e5a56e560140d214c47e26dbb22ade8a0fa14035b5bd18fcfcf87850b2a645a0d","ssdeep":"384:6SXQPsrRM3IawoFSyqD/ZyWRqtG2ZLdq0qBz6dqJbZQu5we624W66unRupy4Gj0W:2YaQDFxsxqlu8bZQu5S5jNjD8W","tlshash":"9ad2c7897a91f03c5293e555c63f500af26b1da8741ea9d4d3a7c9f8bd7888d8133a3c","first_seen":"2025-10-10T20:35:56.934105Z","last_seen":"2025-10-15T18:27:16.399137Z","times_seen":44,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/(landing)/page-7bc6c6c50f98e018.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/app/(landing)/page-7bc6c6c50f98e018.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHT%2BxRvRfw82JFOWhR7h4XPtn1AuSIbuoNdou9wqKYGPUHhZLcH9opCj0G0kcVTcB2tKxgi%2BeclRSAQda1vXo2dgaLGRXSHskmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040466c70c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6670), with no line terminators","md5":"6099f04a9116e630f3c750e7e4d8ee95","sha1":"2228d450925ff0a6edc4a38e648521ace5c78307","sha256":"807f36d9b524cd5016ea681466c7bc58b18fb8c990a1ab46740717ca5565a6db","sha512":"bd353f1cbc46a34c0e5d112e32ef6010cd24294dc71f9f677a832ee7395aae6403ce5b99c363a460da4b43d4d222887c4cbe7d949872af05c4393b1c76a55cc7","ssdeep":"192:q5Zzf5/mJgzqME7a3IWnIgkJCArU/1WIF:q3zBOJF74IdoH","tlshash":"c9d102c1d214efe4f9f619ed912ecc1c326b2a46d7364db4f878785100481d87b5ab8e","first_seen":"2025-10-10T20:35:56.907258Z","last_seen":"2025-10-13T17:34:42.811543Z","times_seen":19,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/73943-6fa88f630b4203c1.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/73943-6fa88f630b4203c1.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cVfEotqBJgAlhhpNMlWMF%2BVyyMXnfQ098Wj2OTFzMJXuLpgqUDyBpILzgme6KXX%2BgRWOERMaKjPHDnMA6LiXTUWdesVO5UUIJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040466c72c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23635), with no line terminators","md5":"a07b1fd7280e37288d7cbb4daad89b61","sha1":"bbc0512ee2e5be52afb5e18fb4b5a2ddf819475c","sha256":"818c0484c940d1d960cd91672dc4496a422495c199932f13a576d9d9d8295b6e","sha512":"8a7068561e1a86dc6bfd94f9a54e6348b5546971761e7cb6709dede8bc5167a63173719366a3d75b12dc3372a4f71636b2c73e5fcdbb8afcac81a8f4e60e4f9b","ssdeep":"384:tFVImwEZN6tmulJ6e6mR+YVzbZe7bTaGexea0T5y+Kw974s2OwOgOTOcOUOjO/O4:tFVImwgNVuX6ebsYVzbZ2bTaGexea0TV","tlshash":"16b2b8a8939465dc7a491ba5ab1b146c2b3f527ab12c882eed4d04344046df8ff2bfd0","first_seen":"2025-10-02T16:43:24.098827Z","last_seen":"2025-10-14T22:28:31.326972Z","times_seen":64,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/css/bf4bc82f097d07d4.css","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/css/bf4bc82f097d07d4.css HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6J3nW%2Fu52BKVbMeZvlwV0UtxazSaSb650v%2BWdQ2br1HhSXUf%2BJU0E%2F0fB3jCGU%2F2aDEKVTGlnWO995%2BzzutC4fHfGFmiv%2ByUnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c09c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71905,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"440388e19e9fd4d50b3acf8f8bb35b3b","sha1":"0d19076acd21b0ee9efbad2b5756a9e3cca942d9","sha256":"612bed891e98e234ac0fcad932c0a6b80aaaf07fb4e9fba35c5c2f766ecb6a8f","sha512":"e0cff5b16c0625fc3c53ea2f1e60ff606b653426a12ba184f9eb4d9651ef047e909acc8ada9c73697f79f597eee9a62fe15041357ffdc2b8465f02f934739d45","ssdeep":"1536:LaIMf4SOk6quZqCYgbidBz9XMl99PozWNw9cXMomUgefzXu7a:Kj6X","tlshash":"ba63a931523cf53cb977e81371905acf7068d507e5736aeaf964b93a80c76a32a2234d","first_seen":"2025-10-10T20:35:56.931507Z","last_seen":"2025-10-13T17:34:42.793735Z","times_seen":27,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/webpack-73978434126717c7.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/webpack-73978434126717c7.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W16rxhVlIi%2BUvRUFHSR03e3xf%2FPSFIJ7UjR2X0V8G6wtw6c08HisgU0RmiTE3ZWmQOYPEc6ZHedkpnxeiKzsiCS8GybcOipaKqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c10c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18254), with no line terminators","md5":"cf7856f59a6550709dd297e3ea5c58f2","sha1":"1fe51ea373af6b4a18d431566f24a71ed9e90eaf","sha256":"3f930f19255177d9c458356b803d590b35c832bbaab863969a8a19471cda898d","sha512":"ec752a1297765a1b1c7cd7f26425a5358c0c157415dd3acd166f91d24a0f331d8641a7cc5c4830f99ab36b9f8410ba7132de873cef3a8df0de5dfd2f41cb5230","ssdeep":"384:+LpsCLDiavHYqIc49SNjCOiat1zIqBmmB+wqqlqQY8F7TZ7KpfQH9BDMt:gcavrIf9SZIat10KowquZY8F7TZ7WfQk","tlshash":"5c824bbdb36cdcea2d3005c26c1760e4751871227c064ce1b1eae77600b6db5a76afb6","first_seen":"2025-10-10T20:35:56.922308Z","last_seen":"2025-10-11T20:58:57.902314Z","times_seen":11,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/layout-0c51675fe9dea466.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-0c51675fe9dea466.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EixOFZi9ow4QoA055d31K6m%2FIJNbhhJpShv%2BqaEd5VsdPg46WJgSYzMy9LZRNb%2F%2B5sxXAGU40NPbaC2x1MwMwzsnVoLCmdkisZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c1dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15734), with no line terminators","md5":"a7e527e63d36f15fd269fe2a5cda9ad2","sha1":"776660476b4f6b3907176583467e945e3fbb7f00","sha256":"9738502f260c83b6c82ef1d25cc2ae9e77a1cf8968a47c6b90b832091a14b336","sha512":"851e303eadcbbfa33968505a09a9100db174f95064cabce308446bf1f850591920f8e44ac4a02eb89279b458b4fee934cc9fd97702c1a8df79cc7231e40becb5","ssdeep":"384:pqNXjjcin8uyf8VTsTknnxn4fFL1bNCxgg3V:pqNXkin8co8SOggl","tlshash":"ee6208a1b580fd3603678991d4fb4706b335493a6c1f9498b3a8ccd466b4dce41eaf8e","first_seen":"2025-09-26T22:32:24.269574Z","last_seen":"2025-10-15T18:27:16.438986Z","times_seen":79,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/not-found-0fa271d6ffb20f44.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-0fa271d6ffb20f44.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USnqF8a0GTm1yRJCl2NXHriwon2Up%2FetX6cEp2mb5y1qIPCpVOX0kyJlVtczHOKb6l2ENtdYY7%2F2F5ILU0Vxq2Iz5WArRK%2B4X%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c26c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24544,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24544), with no line terminators","md5":"93ecb6022624ce28ad9d8d2a43c24f91","sha1":"2fbec1b4c0be7305744b1086ca02cb637c6cbee5","sha256":"0d3373bb825e3ad5ee92da0b34b14f76af00848dfecb8e9685e1640a8bf0f12a","sha512":"2225edb16d543e12acb04670df757efeaa39edaf9cf402f469164b68786cbcbd4d7b6e27a2c864b10c6da09746553413499a2cee67ef51d293c68b98bfdaa39f","ssdeep":"384:5FVImwsfz7uPrDqeNCsYANkRqDNgu4/jSRC5HZ9qYaUaGpHgRX3CpVpulAO5OFOQ:5FVImwIz7uPrmeNCsYANkRqDNgu4/jSi","tlshash":"61b2a56c93e415cc79490badab5b147c3b3e92bab564892dde4e1c345042cc8fe27bd8","first_seen":"2025-10-10T20:35:56.900374Z","last_seen":"2025-10-15T18:27:16.368511Z","times_seen":34,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/fbq.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /fbq.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86Moj%2FkzEWg9pM2oAN0sXg%2FvmVGgwbEgDwRGwyNxaSEoY0Sp2bYUVkzrxvXoo2HVc9nCBD67umiYU0Fp7It2JK2J0JuiAu91OE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040467c8ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-04-08T04:44:39.468811Z","times_seen":9415,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/mobile/girl3.jpg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/mobile/girl3.jpg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/app/global-error-476ee618be04b5e6.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/app/global-error-476ee618be04b5e6.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGPRADanAIykqR%2FeY1rPEiPeUCcdW7XJ0%2FDEBBfpUa%2FsJGTuyQjJ0LYLWhtGUaYCurgFHn5jWg1t7tR%2B9kxe4e7TvzqKDOELlE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040467c8bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"1eae83d83f1d68c304e3fcc1425b6474","sha1":"2b3471e46097fffba0e29b68b68f7906b20bf124","sha256":"eae47141af6df4b5d8d2d8f03347e3611b43400ab0515b6377906304df73b391","sha512":"ef6b89ecef95c1b0b0d5916c921dd4e8ab60a6fea515b4bb398c9de53d40b16db649d6ba524a2b727d29917237e51acc4cc8be7ab610f07afedaeab7ad1bf6b9","ssdeep":"","tlshash":"4dd0978522403da878065aa998f4c831304500bb302dcceee333fe2108169b40382c0d","first_seen":"2025-10-10T20:35:56.917585Z","last_seen":"2025-10-15T18:27:16.351344Z","times_seen":34,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/bg/girl3.jpg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/bg/girl3.jpg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/cubes.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/cubes.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 11 Oct 2025 17:59:25 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YB9Lkb0KNEPnTprf%2BXtNhuo6Rhan11rPm%2FxAzlOBin8ODX4ErumXhS9N%2Buhk2KTDGOOZzFbU0CLEkt81ybvpxNvL0ETKOL0paxc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0404d8eb7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29103,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4e90b2b22530676fb1ab9a83568b1c5c","sha1":"ab5f0809b72c72e4c1955e814a07c7f3b325abeb","sha256":"f317f754674b8b491d490221e7266d336ba31826edd9f4170041698e82c5646e","sha512":"784ad84793d0cbe84c7bc894d003616181426d65605ef3034fa7e33935bf4d47e4b693d4abe8a897c1e991fc669519ae9b5108a9ff52f8dc32e30fce37f025ad","ssdeep":"192:do2EvwnuGMhPP4cLxOcQdvp5ivX1rF6r2QSQSa4Z6h7W:KDYuGiPdxOXdvmNFFQO","tlshash":"cad239a599eaaa32f32cc2d9de4494243e1641d3dec6c161b19d2f6fbf31dc1490f2a4","first_seen":"2025-09-13T11:18:32.403286Z","last_seen":"2026-04-07T03:26:46.604096Z","times_seen":3128,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/logo/girl3.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/logo/girl3.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 11 Oct 2025 17:59:25 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLIs9ssOlMNrUz0EfeML0UsQtsmDenzpcuSJN4dG5XguHk%2B5jXtmoqTyzn3H%2Foj61dsA%2FhUtwetKc9GPo%2FfCkNMbTVOOgqWfjb0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0404d8ec5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6dcab0e1a49dae0b93ac8f45fa967d35","sha1":"5f5a25011844718db14a6c8c14579dc297e302f4","sha256":"8314c8a58a949561628335f236903ad9f1c4d62aceef0c620d79210f11be41dd","sha512":"e6278ab5bfa8f9ecdbb65883dc02793e0eed829bc526eedbddeea109a7a89253f65d7336e6eb91c9208da6ba3cf6a481016d43730b423c09a0dfbdd33cb934ba","ssdeep":"","tlshash":"663185a123f8021cf10472fc615560a26e931cc29e96412af76c1d89abc416d4f9addb","first_seen":"2025-10-11T17:59:54.099439Z","last_seen":"2026-03-16T23:53:20.495671Z","times_seen":61,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T17:59:23.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BrA7iYmb5%2BP29Q%2BpODcMv9rNMX6VizwGIGWV0AVDsDzJatC264bEevz6LmiRD93DyemexdR0DyuRwIQXYRSd8lC2l3bNsdw\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d040443adf56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11829,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11829), with no line terminators","md5":"513bd49eb2249d54a11baaa51fb7efe8","sha1":"095e2488a616bf480589e8a25653345374a420ad","sha256":"d6b0351ba01dbeb10f5c7b1cfbaa17fb14577f33792f72b74da9c534ab77cbf2","sha512":"b2d98a5456d2fa97869b6d4bbea2742cbd6aeeffc8acc4f380a7bbb3d01cf1d758a692d1490871106272e4e94a03a0b64acf2850e0c0f5576c4438981d072f75","ssdeep":"192:a96B3BhBeUOJ5RgVhnvefSpGB913MSquAUzDnY14tWofUqaa:a9yxDDOJ5yvwZz01Udaa","tlshash":"a532011bbc05ce479c77ad5d417e9d3a40cdcd3b8a34c9b8a1cdce580642ab91be9c81","first_seen":"2025-10-11T17:59:54.101498Z","last_seen":"2025-10-11T17:59:54.101498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":70,"dns":50,"connect":1,"send":0,"wait":124,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/31684-b8837a619f76486e.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/31684-b8837a619f76486e.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huEvmx1YYSKLmMJyir6zC4ooJBvTXQ%2BKEXSjbeUGPVfS5FudWmWnh8MD%2BZUpi143ZEbNJaLtbmg7aqbZ6j3%2FPZB9YdjCzPFi6%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040464c15c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8c9e1f9e9713d9d76f976369dac25760","sha1":"1d7cfa0fb89dd89210e337557ab9af8fcb9e7e17","sha256":"07adc3c304cb5798f2e26622c0215307b7b65a7f8bbb87a32f44832f781b75f4","sha512":"a34dc478e1f217f0cf2d8a2c291b933dfeb5121fd41a2f08f2ec3a5b526ca55babffd1358cf0b55ad15009821510b7f6ca9a66793931023d3910d85938ff1b0b","ssdeep":"1536:3Hk+1qVc+dJWgclHHlU0Zb8OeM8aZLoEAEuRaQ3aTcXH10nZAEUOW/oM+G6GZVsT:VqW+dJW9xAMiEuV36XZNGZm01A","tlshash":"5704b8b676d0f89107a780d5843b400af3395c3b146f74a0a3e6cce975645dea1b3faa","first_seen":"2025-09-13T11:18:32.512742Z","last_seen":"2025-12-06T23:52:39.117547Z","times_seen":597,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/chunks/dc112a36-4dd9553e3950a789.js","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/chunks/dc112a36-4dd9553e3950a789.js HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7b8bqobey9V%2FZYvU8LA3lPy6isnxykA2Udto%2B%2FF%2B1TSmXE4paREVYi8A2bsF9f7nu79u4ViI%2BJdtETn63AnmwV1kh5n3vXcUPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040465c32c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b0312e3e2ff7226227ee081f6693db1","sha1":"823c7003795d9623f8992900a6f337f599bb7eda","sha256":"dccd0125f7ca7c6c5f3f8ae7d813743257cb55899fcab2d63b70fdf06b2a05e2","sha512":"612eb966b9409ee719588a9f82170d4d6c9b5c075b85981a1ac0dc0fb8119997de7f6a139ba2908d7ccfe0ab342f452e39ca15ec3d9fafdc1c2a7d36cda06d87","ssdeep":"3072:Hbyz4KjrqQmINGbpJGDc0Lf1c/X6Rpbdt0myoQj7sOU1IMi9wD5yojt:HijOQmINGbpJGDc0Lf1c/qD0erI5BEt","tlshash":"295419597254343805c540a9906f094bf736292e246ac49cb36cf4efa8bdecd31beb79","first_seen":"2025-07-19T01:07:13.417114Z","last_seen":"2026-04-08T04:44:39.432394Z","times_seen":7614,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/bg/girl3.jpg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/bg/girl3.jpg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73143\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 11 Oct 2025 17:59:25 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwx6W2L8MKLob3kdnKe%2FoTu35Po9Lzb2iCr8LWQcgsFeXoIjUWSOf3vkxf5Rtzb3hFT0Q7%2FGUfb3y%2Fhham4DNBstQIQ91eu5PBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0404d8ebbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1332x1000, components 3","md5":"680a38d052465d8036db673c1c416a79","sha1":"b0f25528bba6224d5dc0193e79a07f8e157186cb","sha256":"7fab8f5f5423b2b06aa06e87c90ef4fdafcb26a9fcc94161d019bf892fb7b94d","sha512":"22aa5abb9005cf2c3936b7969a2c008ce68e87046a16423d3546b0f6d26d6d7b06794e88c8c6bca7593a0a29780636a9859b5ffedc17539c000d16bbcda4a6de","ssdeep":"1536:k37gTP6yZvYSvtMfvA8rjWhUDG1wJBS6FLaEYFu:k3EGvSsvZyhUDGSJBS69T0u","tlshash":"2963f17ec275d08ad19c56308a4fda3ede8ea8f4d716edb3e6a64936e0140e46430f0d","first_seen":"2025-10-11T17:59:54.105335Z","last_seen":"2026-02-05T14:02:15.98448Z","times_seen":41,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/fonts/proxima_nova/ProximaNova-BoldIt.woff","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /fonts/proxima_nova/ProximaNova-BoldIt.woff HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/fonts/proxima_nova/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: font/woff\r\ncontent-length: 54636\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:25 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fp05H4F%2BwYGw%2FLPH3TPrfsZjvT%2FaQv1GEqL2%2FfqsfEspgC76XAYoxLPMFdEGZB%2FlnLusyVDRYre8Q7ATmmpt2KUO4Apru7jeOKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0404d9edec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54636,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 54636, version 2.3","md5":"af44a852757d1cac8f2ff15e6de18ae5","sha1":"991dbfeefb41380450647d4051337efbdb7ed534","sha256":"6ef0b2496a939cd7074c3f34d6402aa896a3b01ff2f31427838fc65be2d92f5b","sha512":"34d7d32d0933a2ac6be90aeff5e02851cd52bb56d27dd4c48ccd03ba42eb6cc4f5e2ee64593feb6dcf7a343de4fe7d300e7d0013b21ad205980c23b6d911d3de","ssdeep":"1536:qNf1/aWYBFxXthMkoCiOq3uDe7UX+qswcbX9Q3/R:Y/aWYBFWR+q3D9qswcbX9QvR","tlshash":"3b3302f29368d180c6fdd63f2e754fc52272c3c082e314f99799a90226e49fd16067ae","first_seen":"2023-05-22T04:12:10Z","last_seen":"2026-04-07T03:54:27.297779Z","times_seen":311,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/mix/landing/logo/girl3.svg","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:25.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /mix/landing/logo/girl3.svg HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:25 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 11 Oct 2025 17:59:25 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZDCVoJ%2Bz58RSNbmHru%2FVmcsv0GLbnr%2FsDocRQiIORM%2F2yjEpBsrV6E0SfLa%2B91ZYR2B00d9TDtESvCvKIwwe0ySLpFA6rO10ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0404f7b93c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6dcab0e1a49dae0b93ac8f45fa967d35","sha1":"5f5a25011844718db14a6c8c14579dc297e302f4","sha256":"8314c8a58a949561628335f236903ad9f1c4d62aceef0c620d79210f11be41dd","sha512":"e6278ab5bfa8f9ecdbb65883dc02793e0eed829bc526eedbddeea109a7a89253f65d7336e6eb91c9208da6ba3cf6a481016d43730b423c09a0dfbdd33cb934ba","ssdeep":"","tlshash":"663185a123f8021cf10472fc615560a26e931cc29e96412af76c1d89abc416d4f9addb","first_seen":"2025-10-11T17:59:54.099439Z","last_seen":"2026-03-16T23:53:20.495671Z","times_seen":61,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sawinz.com/_next/static/css/0cbdc65dc9825597.css","fqdn":"sawinz.com","domain":"sawinz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sawinz.com/","date":"2025-10-11T17:59:23.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sawinz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:28:35 GMT","end":"Wed, 07 Jan 2026 15:27:01 GMT"},"fingerprint":{"sha1":"15:1A:BD:26:40:2C:DE:A2:29:24:6A:8F:E3:A4:6C:9C:BB:20:6A:1C","sha256":"40:5D:51:FD:69:5B:01:60:D5:A2:D3:10:50:EC:EB:EC:8F:7A:0A:FF:9E:DF:A4:E7:2C:B3:76:26:01:78:B6:17"}}},"request":{"raw":"GET /_next/static/css/0cbdc65dc9825597.css HTTP/1.1\r\nHost: sawinz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sawinz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 17:59:23 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 11 Oct 2025 17:59:23 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aM5ZbwmrvpQeIGF8QoDHfVkXOUMmfpBl9Aq8lGH%2B9vGBAP5BDD8ITZBvV2PsJaLlMbXd6nATp3XLrTEwV%2Ftx%2F%2FO8eJvO335AJ88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d040463c00c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5207,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5207), with no line terminators","md5":"494ad247d99aeca1e5328f33ebec0e11","sha1":"d4840536c2f04115ad93eca7e069caaf06b0f73b","sha256":"5979871c5d3483bd7adf3a7226b0ae9fb5058d169ea81bbec1194bf3c4a5b5cd","sha512":"a1d553599680fdd8039059d20390c954f6c1bd76af4d64ab32ea8d175b42608a4ca209c630dbd8e048b95859be6a8557a4f8e7b796e8bad8afc30a7860d5e4cd","ssdeep":"96:gnWJJs8lOuQmlyItK1Srzqv0jmIyAhxsHrjtTvd:mWJJP3QmRtK1SrbjmGhxorhTvd","tlshash":"f6b1b927b3219073028b4f0991a7af79de2ed18186536ebfa590084cf3cf9d115a5ea7","first_seen":"2025-09-26T22:32:24.808099Z","last_seen":"2025-10-14T22:28:31.39394Z","times_seen":72,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"sawinz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
