{"report_id":"2373e562-5bcb-413c-bfc4-fe9ca2e90afd","version":0,"status":"done","tags":[],"date":"2026-07-23T13:33:40Z","url":{"schema":"http","addr":"wincent.cc","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"104.21.19.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"title":"Wincent","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wincent.cc","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"104.21.19.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T13:33:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"oss.awsossli.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"i-invdn-com.investing.com","ip":{"addr":"104.18.32.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-02-23","domain_rank":358950,"first_seen":"2021-03-02T12:54:12Z","last_seen":"2026-07-14T22:52:01.039856Z","alert_count":0,"request_count":2,"received_data":5320,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"oss.awsossli.com","ip":{"addr":"47.79.48.179","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2026-04-11","domain_rank":0,"first_seen":"2026-04-22T17:41:54.702205Z","last_seen":"2026-07-17T00:47:27.027144Z","alert_count":2,"request_count":2,"received_data":246625,"sent_data":1129,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"vip-cservice.com","ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-15T20:16:59.760558Z","last_seen":"2026-07-13T14:38:30.331702Z","alert_count":0,"request_count":3,"received_data":67634,"sent_data":1480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-12T08:38:00.929095Z","last_seen":"2026-07-13T14:38:31.593934Z","alert_count":0,"request_count":15,"received_data":275827,"sent_data":8682,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"content-media.investing.com","ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-02-23","domain_rank":0,"first_seen":"2026-07-16T19:05:29.683816Z","last_seen":"2026-07-16T19:05:29.683816Z","alert_count":0,"request_count":6,"received_data":102005,"sent_data":3868,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"webapi.amm1377win.com","ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-04","domain_rank":0,"first_seen":"2026-07-08T14:59:58.924633Z","last_seen":"2026-07-08T14:59:58.924633Z","alert_count":0,"request_count":15,"received_data":618747,"sent_data":8465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wincent.cc","ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":64,"request_count":32,"received_data":14192012,"sent_data":16139,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62e1885237efe8d8c6b8c3abf54e18c0","sha1":"a92cef8f7e4af70972457dc58a065ef29137262f","sha256":"a3c3f3dc11a447a3c1674a432c0af36b8d75ca53896970a39f1b7b13b199e742","sha512":"16ef5ed0f2300e3cd94c8c6679398588b45cb10a6414de60aa22d7cae2bab0194024034d637785a811d02e40a8f6bbd1af08288c6d08a607601dad98596e1216","ssdeep":"","tlshash":"2dc08cc5a0d23d001606645010af29e4a0288026704c1b028c94d84c2e220b49233e9c","size":138,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-07-23T13:33:57.309412Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52f335ff96f78389f769b0bfed30a181","sha1":"99562cf17916fe26a77752862ac537cc01de6fa2","sha256":"bd035043b89038e0a062640ec7dc90285248068c4f432b3fbedbe4296854ecf1","sha512":"9bcfdb9764680a82e9830908c0baf533c248ed803d969ba5a8f268a4cd205ce3c1e5a52e4ef46ebade59efd438a6b3467a837bc93af2e4e951d535221662ba22","ssdeep":"","tlshash":"abd023c560d23d241112341020bf65f8e038c07970c8575f4dd5d8942fb60bd4137eac","size":214,"data":"","first_seen":"2026-06-09T19:05:36.9858Z","last_seen":"2026-07-23T13:33:57.310688Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c26875a0781ba12622eb34545ac19361","sha1":"14580e76a744ec9c480a781a613a6a8c125b3fed","sha256":"54c8b0e232608677648467827547f322e31a5459065b8c6cd0ce86562703093d","sha512":"44356ffc6159a4e99e029a0ac51507fb1af4083278df768844e9608743e161019b3d4f96a2655d6a7f8a031e24edfb9d538d7ad47057deb29e51c45a70551f23","ssdeep":"","tlshash":"d2c022caa0c27c0026325423027f30e880294456f4880b238cfcfcc43fa22b08223dd8","size":186,"data":"","first_seen":"2026-06-09T19:05:37.015248Z","last_seen":"2026-07-23T13:33:57.311967Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"41ec37f2468a33387bc86e5dc8b9fc8e","sha1":"4a57b79fd997b9416093b65c489e23e0f353a5a6","sha256":"ade98bbc6c1d47962da05d2a625544db32fd692d97e64306d4c118fed2691bf2","sha512":"ae25603f38d90f85de27b3c4d84f2f6bf792422e8956fd4d304b780a1ec57fe59d1e1a9608a1aa4db9587f394449406d14ef5365dd9478ab1f61d2ab6741aa82","ssdeep":"","tlshash":"0ec08cc9b0c36d10660a651014af36e490244426b0485b868ce4d8482e220f48233eac","size":146,"data":"","first_seen":"2023-07-23T18:22:18Z","last_seen":"2026-07-23T14:01:31.054915Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b0eb7b6acfac2acc568d863d36c7b5da","sha1":"26e012b2a501ef29c82e68353be7a3d76ab3de35","sha256":"b92b519df625dab288a02ff00bc9a02c9b396e3c1687fa89b6e9b3288fac6584","sha512":"3b3eca2c69a4c83887f516457dfa55fe6335b72cabd6f74be651fef1ed9ab03f91292107ed3cd0478c9eb79dd27c98dce5225db3a42ec8e1b8f96c43bbccbe3e","ssdeep":"","tlshash":"bec08cc4b0c26e009606682014af24e490244027b0881b528c94d84c2e220b08233ea8","size":141,"data":"","first_seen":"2023-04-18T07:54:31Z","last_seen":"2026-07-23T13:33:57.313903Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b85cd929a95a3a2c488ced09328ad207","sha1":"4cdd2bee7b95cb596419bb711a6abf23ca6cf9ed","sha256":"e0f26b6b8339633e69bc9e6ef799be9ce8abfeab0d28719234094ef76d1a38ed","sha512":"56d262f6ef1457bf25173c5688ed391f86e58886228de5ba60b062717261625a5ed7685d16f8287ab31e0ac017a42082e795b272bc03722d1e96cdd666c900d7","ssdeep":"","tlshash":"45c08cd8a0e23d10672a6d1218af26e89024802b70485b12cd94e8592f630b89333fec","size":153,"data":"","first_seen":"2026-03-09T14:10:46.242476Z","last_seen":"2026-07-23T13:33:57.3145Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c896fe06d9a7e47486eaaa4696f01887","sha1":"a4f04141387204d4964916f6c2151338d26c004a","sha256":"54b0ec33af575a4f55be5cd937bdcba5a584aca4c49e4f1f969c742d0c061ebb","sha512":"7e2abfa331d281dc3b356d6e4950e38df3983f68fee3795086843241cfa200ef2b229b6371eaa30e31c9f55ba15ba4912865fdf4c7509ad3163eff717056527b","ssdeep":"","tlshash":"5cd0a7e8d0a77c0123195732f05f6ae4b02a4426a595151baeeef4983967070d33ff59","size":238,"data":"","first_seen":"2025-12-18T00:45:38.467663Z","last_seen":"2026-07-23T13:33:57.315091Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da6f96e28f67a6157a3936ad9620e184","sha1":"2048856e2add65759547645f3d5b41f91e7b4321","sha256":"9e7533262f41352610208208fcd05bddb8400f22fb8c23679a5a58708612a0a9","sha512":"26faa3d2211fdc3a6ae217e658285f14822523bdad08cf3f71d691485d9427cf7b0ef8ec51a45009b6b3af00a5d9ae6b8026a0892fc017de748dfae3d9e852f9","ssdeep":"","tlshash":"5ac08cd4a0c72d002602681011af34e49024402670881b038c94dc582e230b48233e98","size":138,"data":"","first_seen":"2023-04-13T07:32:12Z","last_seen":"2026-07-23T13:33:57.31634Z","times_seen":1540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4622509a150e053c1344b22744b58831","sha1":"a8a7b9e8d00b9cc82f016f0d136a4437f0f790d1","sha256":"b00706366d4d1f1e32235cbbdb1e78be0915dafb6113693290c6dcd87a01e32d","sha512":"a9e188eed78a011936d3e1f0cf064c3da6402a76093aea7f6655832d13bd073e92deba7a65ff234a49b03b0abdb78a25c02147eaa642ade645ded8e2dd574229","ssdeep":"","tlshash":"efd0a7daa0d2691815535011607f3dd450289422794c17a59db9c89c2a721f0d177fdb","size":231,"data":"","first_seen":"2025-12-18T00:45:38.43516Z","last_seen":"2026-07-23T13:33:57.316984Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/vendor-CJPh82NI.js","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e6c2618ada2a129ca6f7fb2f8a16539","sha1":"b3854e9c4af9c1282edfc773153d22a5adb61699","sha256":"962cb718c9812c8a5265ab9d4f916bf0ec9c4d53452c2a3fbbd155499d3f6ce4","sha512":"d94fb265bebf67948a7cf1d4cc468c9437542dca2c282c7a671dfb55236ade31b4de6a185a6f0c6e08efdd3e3c8236bea2bfdb7b994411cc7163cbd875ade358","ssdeep":"1536:nyp4FfPoBsIc+vsDknB6t7HfujjVd/daxlKXs3rlzOiGzWZsQNuqcL:yCqBsIBB69HfujjP10lKc3Zz1s89e","tlshash":"efa308e93282b06253ea19e700774015f33a1949380ed8d4f16daddb3d7744a91fbe6e","size":105952,"data":"","first_seen":"2026-07-23T13:33:57.302003Z","last_seen":"2026-07-23T13:33:57.302003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ecdf6f97b4bf53c51a8111285f1d98e","sha1":"9061d0b7efc78673288318497dec30e94f4df91d","sha256":"acb0b6e21e93f6eeacd7de672b6db65aaf2aa94cdf98a6c7f24151b700b207f4","sha512":"8bca1588198f46449bab5f316a8dd2e41933cccc79394e4c88106f583d0d34608a977a5c68af2668a381f2abf67aad84c956a1a048cf9ce757073d7ea665c804","ssdeep":"","tlshash":"bec08cc6a1c37d102613691124ff36e8a435442b744cab538c94e9ad3e622f48237eec","size":159,"data":"","first_seen":"2026-02-24T15:47:27.773352Z","last_seen":"2026-07-23T13:33:57.318091Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"22145413f5fc2506c63154563968cf90","sha1":"cda0402e79b55cc1c425be3a702915e3a414c250","sha256":"9623db4f9524dee362e2f7baa735fe80771ad4c4e1082042347991c3b46e50fd","sha512":"5007367c97ceed3f68ac1d617b4ba1089913310b8c9b6a3c18d9478dfb582e5937c0c32c958634d46b21a06709e75f6e9d21de47bf9a7b3d60f32ce01107d0a4","ssdeep":"","tlshash":"66f0c045414a9a845f1108517b5b5bfee15a101c760761d56fc7d43c36210fb4732c98","size":532,"data":"","first_seen":"2026-06-09T19:05:36.967652Z","last_seen":"2026-07-23T13:33:57.318687Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a092e80aaef252e928fa981fa3868fc0","sha1":"b9031d56164328dcc2acddd72e25620b9a6d354e","sha256":"fff64ebbaa6997e3ebf4c9d9dc7f098a35e54dd61bb32e64734267a4c245dc51","sha512":"a94c8832f067dd2bd3ec399735d23d0ff04f0d4c7affcbaa978ef242c02ed14ddee4c60e109a831786a022d0e0c6489dcc0ed37a75a4b1a0eb9e57ac59d8e18b","ssdeep":"","tlshash":"b4c012c8b1d63d145705585165ef25d56034403a64585f12cd94d9592a528b89237dac","size":174,"data":"","first_seen":"2025-12-18T00:45:38.461565Z","last_seen":"2026-07-23T13:33:57.319918Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c1c54df64f108bd79703fe61e05c26a2","sha1":"f1a0ceed232efe5e1e7b1aca46399dd85edcacef","sha256":"101691b6560d98de523ef2938ac2b948ed85a1744658bd1309ca81772b8c6698","sha512":"fadb8a0e416d177d677d9d11f829a05f656d7d4f902e823e5bb896fc6fbb1319f3ed71f89c4a6eea61df6d7049a10626a6dd08deaf64623a55a4c291b1bfc320","ssdeep":"","tlshash":"5bc08cc4a0c66d001606742450af28e49024402a744c1b028e94e8482e220b89233e9c","size":147,"data":"","first_seen":"2026-02-24T15:47:27.787742Z","last_seen":"2026-07-23T13:33:57.321059Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ee25df141b731e0db791e93312275f46","sha1":"c7de81b170dd04f2ec1244ea637bd67689a2e383","sha256":"ae4221e15a03cc0a37a1367e77b5065b2e6982a21f9bcd3c4daa1338db1695fd","sha512":"e42f5cec4374f848e64dbbc39d7fd67f02f214e3b9b3a8015f48d537257f6282c1b65422bd779b3d779f03192280698a84a5a93c9c4cc3fc5d7c3de3e2cf9a04","ssdeep":"","tlshash":"bec08cc4a0e23d002606641020af34e49024402670481b028cd4d8492e230b0823be98","size":140,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-07-23T14:11:53.166187Z","times_seen":4193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8c279ddf2bf766f6f427c121fbab3ee1","sha1":"fca918a6aea1760285d4b3ba7bba650eb666b13d","sha256":"d91ec9806534957b20c65b5e222f289881d79374ab3d417fc167bf6e2dd013c0","sha512":"a900f44fc96df5e0177dc3761dfe37a25d0634e58f30d95be4d8e415785a8790c4f321fc34b0b075b193277f0f9c0fdbc675eaf4aac7f224be97472c5141d625","ssdeep":"","tlshash":"c6f00e41738a79140fd11366307a3fef643c866a3b020ac5a956c190bb1a074c133e6a","size":488,"data":"","first_seen":"2026-06-09T19:05:37.020746Z","last_seen":"2026-07-23T13:33:57.322863Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94318a58e4b9a3aa0b22dbbf37d0ab90","sha1":"ba9e535b20fffb2ad169446cb161365678260d9e","sha256":"520800d485a3a066bd5196ca0ebc1ce86cf0bd39908cf644a3460c99be833614","sha512":"122a8aba1141ea39d597fc9e7b8ab2d72e57a52be0899ff0141b657cfad30cb5be369dc04b07edc437df4aa91e1a2ea0a8fb76525e59c3b574a5db96fe4697a7","ssdeep":"","tlshash":"11c08cc4b0c22d002602641020bf29e4a024446670485b128d94dc482e634b08233ed8","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-07-23T16:00:02.517871Z","times_seen":972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa14006ea63f023c795d2b43ec893c6c","sha1":"86af17e9e921801fc22c9df29f2f66abc0f472ef","sha256":"f0ccd4f6f813d74629358b3c8928b67ea6e75d149bb916c7bd11ae0a1a33624e","sha512":"50d62c4b85c34fe1fc8b9b4f3aa884001e5373c16cb4ecc8694280b48f99a56f9937e6cd10e412eae5349b20599aff4a8cdb894b0b843b678763233cfb994612","ssdeep":"","tlshash":"03c08cc4a0c26e001602645010af28e49024442674481b038c94dc483e220b09233e9c","size":137,"data":"","first_seen":"2026-06-09T19:05:36.964367Z","last_seen":"2026-07-23T13:33:57.324729Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f27b3881d44cd391bee49ef403da9db0","sha1":"ffdde522964e0086dddd9a4ce3d5fe098c11d900","sha256":"1b30a694622d54492ef09d8249ed73b89e2b5377104b1f6f65c168e43837b18e","sha512":"1774e49cd4f18e352a12349d94926b4a0b2f63da84253b616ca3ed1f7ff23d1a37cf80754349f3318d3769b0432be8dffa0944d42163ad364b417b1709ebd6c0","ssdeep":"","tlshash":"ecc012cab0c36e406593645531ef34eca0754416b14c5b569ea5dc946f621f09237ed8","size":187,"data":"","first_seen":"2026-06-09T19:05:37.025767Z","last_seen":"2026-07-23T13:33:57.325799Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"088589250a4c559bbe199e01c83f87b0","sha1":"80fb39e4f7fe57d44a179e06f5fa3f57271229be","sha256":"7d2e122392201879a786a1a63eaaf107ceb09ff7e79825e245cf6355f3e30042","sha512":"ca2c684f8d887dc4762e82ba09f10da825d845f6860e3b512c916b1be03683d106503ed3c6a30e50be5041d11230ad1da4568665f4d01ca0b1a1aea6fdc0cd3e","ssdeep":"","tlshash":"6cc012c9a1c67a552641659125bf2ad89025d02765485702dce4d8582aa24b49223da8","size":176,"data":"","first_seen":"2026-06-13T23:52:22.912486Z","last_seen":"2026-07-23T13:33:57.326885Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T16:00:02.524528Z","times_seen":6923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"80deb60bec886ec623bcef969b3d2c87","sha1":"3caf9cb0cf1db19b69e7a4103f6b442a8bbfaf2f","sha256":"e6a1bf40b1f4558059a8c63b08c4452d2e811b2a5bde49d2a6f3cf2a788ef0a1","sha512":"f6fd617f7053b6e113fb75ca85bc3400d8be452bb9bb701fbae5fd68d1c6e1a981b7d1380a7b5962c45b937fea8a85b51325be6a11c1154921ba7e525483ed55","ssdeep":"","tlshash":"d8c08cc8a1c37d0016827a1024bf3ae4a024842670c85b178dd8e8983e230b08237e98","size":151,"data":"","first_seen":"2026-02-24T15:47:27.780566Z","last_seen":"2026-07-23T13:33:57.328204Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9fd741ab5f3aa1a00a54db34ffc3bdcc","sha1":"619f8a414f3f314935e8d6c882324714a2578735","sha256":"4072feedf959c8cb76b5ecb1e3b28b767450b0c4caa27aeea6f81e1361d6bc58","sha512":"a877650e2f264fe9062f91ad89d91a1f4a9926f01f949e4b83c645b336bc7730deeb7382c4f7e7b1828218b1b623b0464a4bb30f773361a596596d34c887e79c","ssdeep":"","tlshash":"3bc08cc4a0c66d101612685114af24e49024402770481b428c94d8482e220f48233ee8","size":137,"data":"","first_seen":"2023-06-03T18:56:31Z","last_seen":"2026-07-23T13:33:57.329491Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"568b705d19200105cb8deec4d9adc3e6","sha1":"ac5f486a9455152949d3a53d82d151053d348187","sha256":"5f33a9d2d6cb3f5c745a58c5b5541cd5857e77d9282a994b62bd7b166970568b","sha512":"b060f68e12462e8f1f22b3b289292b744dae88eadf126f750f96c3cd0425b3c413f1b9c48559a3f8afe27f005f9fdd1f4e7d8ec2213bf9c98a358853efd6bda7","ssdeep":"","tlshash":"91c08cc4a0c26e005602642110af3de490244426744c1b028cd4d8482e230f08233e98","size":139,"data":"","first_seen":"2026-06-09T19:05:37.009154Z","last_seen":"2026-07-23T13:33:57.330224Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cee3e9d2862361e25716b41db2461f21","sha1":"f547e9417f568293c334268d455fc835d8c5964c","sha256":"20f694611fc8451f5db376f9b5202d3d8c862a1ecced86cd81a4f9a860abbda6","sha512":"6371d4612df4f3ed5916abd4e1476fa969d51f535ee8419502d65a39b7a6154704c49269a49095c5b26b7c315140e5919ade7d9d6815863f0c9a14e7da7c9583","ssdeep":"","tlshash":"81c08cc8b0c37e50a656641824bf28e890384426b4481b8a9de8ec492e760f08233eac","size":155,"data":"","first_seen":"2026-06-09T19:05:37.018829Z","last_seen":"2026-07-23T13:33:57.331446Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f58ea771c41161d5ebda5842e791c491","sha1":"f462851e0c2788aa14daf0c073d2bfb36b624290","sha256":"b84f24faaa3eb27d8c6f604203aed2f529d7e59390f135cfa0974b79c92813e5","sha512":"cfe6705498d9e354ed38182ab7bdb73e1ace825eeecb03e7387fd79435042586d1cdf22a79a2db8d2a953c7b14ccff171352ebf7611bd447e33daba3dad1e52a","ssdeep":"","tlshash":"8ac022c1f0d66c00866a940220af60e05128406760882a02ccc4e8482d238b4c23fda8","size":183,"data":"","first_seen":"2026-03-09T15:24:05.471623Z","last_seen":"2026-07-23T13:33:57.332604Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ececfb733be89cfb7ea91e1627150f43","sha1":"d337ffd0b2bb6e3c6b47577c5fd6a6f8d043a7c4","sha256":"7585384267750da628cc3bc1ef242b822fcf23cd6768a525530c51a2322503dd","sha512":"2915cdd8875f7e1fb502b9bb497b93cadcf497190dc2bab88101d2ed2bc3ec73c4b8d8f0e4e2a8f5222fbf02d6cc4cd00c9a52df3296e9c506a594faaa29c368","ssdeep":"","tlshash":"9df08b92a1a4ae8c9f21416075bb57af832c20cdb60e05da7594e43517410b88237fb8","size":546,"data":"","first_seen":"2026-06-09T19:05:37.024716Z","last_seen":"2026-07-23T13:33:57.334106Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ede74e75dbb1611035cd62bfa1a0eea4","sha1":"7cfa11d8edf07d4bb08b50c42bf6f4ba231de047","sha256":"a168e5a14ce863e89bf7c1f53d38e408cac6e90cea284765b67eaf21c1f5c54c","sha512":"b655977f3dda2959b29e9cf51ca8694f25bf3368b1f0f615933c8d944dc9bc9f72b7ffb8777c264c4e09dff09d719dfcee74efd45d7b20ba02a9d671ddfc5e75","ssdeep":"","tlshash":"40c08cc9b0c33d007a06681454af35e490258427704c1b028c94ec492e331f08233ea8","size":147,"data":"","first_seen":"2023-06-07T15:49:18Z","last_seen":"2026-07-23T13:33:57.335759Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8b2a6e3d2287ee3d09b11548c9b1a613","sha1":"07a55f0a602a232394a0272216eabfff2ea1cf5a","sha256":"3a28a44fbfc7e1a30a1f68cfd520a63f87a03572e58e31ad7c658a8d5f66fcfb","sha512":"1c49262bb14aca2973cb7799cf28c00729d6888b61038338705eedb2e6324332dd2823308217483dab5f8fb686924258f3d1c06d34263012b825eb0c6fe17e26","ssdeep":"","tlshash":"0fc08cc4a0c36e001602641410bf24e490248426704c1b028dd4d8482e220b48233e98","size":139,"data":"","first_seen":"2025-06-25T20:14:40.114168Z","last_seen":"2026-07-23T13:33:57.33635Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa86ab500e62d68c7a4f1fff0b81b935","sha1":"3d5958231c218b5b0d0b8ac40535f268f8dc377c","sha256":"6c72e99306e976bf23d4e3cbccc23d0bd2ff32787a00c0cd482b5fb7cd0c7fae","sha512":"748de9a3530263b9afe704ce5e749bffc30e3c12edeb039b39d93f7dd527e39fef51bb9830cc130b3102596d0577c42bb2c0909655b68a7adf5251c6d7dfd965","ssdeep":"","tlshash":"65c08cc5a0e26e001a03a45014bf28e49028402678481b038cd4e8683e220b08233e9c","size":142,"data":"","first_seen":"2024-08-21T07:51:07.485975Z","last_seen":"2026-07-23T13:33:57.336974Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ce57f721a415adfe0e80024ddb258a87","sha1":"6c334cd33c2a1e077d2ddbe592b1faa1bc2c89c1","sha256":"f9b70a8944181f37cc67990546ba1a80ea7b488bdc85be184db0f14685f6b619","sha512":"b371c195ee4827242cbc910e56e63704caa1983ca6e058e2f6d89fe57bcc8999f6ed27f6bed9ce2723f8fa7975620c64bbf52214921a41ec8dbfd23dbe60fcb4","ssdeep":"","tlshash":"2a01d30e650cab588f104594747b476e502db68d714b35dc7ec6d53535320f98736e8a","size":675,"data":"","first_seen":"2026-06-09T19:05:36.960543Z","last_seen":"2026-07-23T13:33:57.337579Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc04525caa1a384f8f939f263003a2df","sha1":"7ee80479861fc6580a67757beae96ce4793168ae","sha256":"18ab5411c20c30007946f0636144273e8e2fdbe06da91b3c7d853280853b7c7f","sha512":"98faa9495858b9889876296f263173740963118b4be0618560c916497f1dfb4071c7fe322606d698a90c6b8a0ecd593e8530f0a24786e837ddb1a59cec4689c8","ssdeep":"","tlshash":"f4c08cc5a0d22d102606685014af25e49024803674881b028c98d84c3e220b49233ea8","size":140,"data":"","first_seen":"2023-04-27T07:37:24Z","last_seen":"2026-07-23T14:12:00.699837Z","times_seen":2901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d2d36b95bf80aafc070f52f3944720e2","sha1":"3d794a98f55384108183d464fd57cdeb1a5f91a0","sha256":"95db5518c00369cebe00b69cba1b75c7b0904eb691c2e24c26791ab6efa7b331","sha512":"3e52519c5cb8509ad58677bf9bac8d554ec59e2b2b4ace94e98894bb4142b6524d6ab4697cb7a5760e8486a8b9976b800daa28ea6ff27203a909e0c698370417","ssdeep":"","tlshash":"e6c08cc8b0c33e002a46785414bf39e490244826b08c5b4a9ce4d8883e220f48237eec","size":153,"data":"","first_seen":"2026-06-09T19:05:37.00821Z","last_seen":"2026-07-23T13:33:57.339306Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75fc54cfef83ace7b917a8dd2b614a25","sha1":"31bfa59ea8797c2b849210ac56a1519884044927","sha256":"1241425a39fee437d4a1c39927cd32b65a3570c5b40eb7b52cedf27629e9bb77","sha512":"d074eb93b928d39f6e232a851f866b44a5a409b62993db911b99da8cc6244d97c5dc984c31ed295fa65dcd85a965f7d1aeee3f0725cf8de6bc030157b6710f65","ssdeep":"","tlshash":"dfd022c1a09aac804e2aa81918af26e8f0244d27b18c0b238c94c8443a930b88133f9c","size":196,"data":"","first_seen":"2026-06-13T23:52:22.850563Z","last_seen":"2026-07-23T13:33:57.340579Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"78c858bc64b02dfc5ad7293f2058d72d","sha1":"7083a7b4ea92aa8173998e2bb3370d48a2f74f89","sha256":"00c2caf784086912e94836ecc9b0fa0757923c6c6e4ba0fe3fd06547127c35e5","sha512":"066c52b33099c425d2db3dfacf26720d400caa02fc7f6ec2c746dc14fe93b9d3cc2b307971cb379737c565ddaf2dec6b530f32fe449f6cfe02ee8018a76b3cfe","ssdeep":"","tlshash":"afd022c5e0b2a9102b22662415ff30e8a2354cd7b04c1b268ee4e9092e234f08337ea8","size":200,"data":"","first_seen":"2026-06-13T23:52:22.824389Z","last_seen":"2026-07-23T13:33:57.341647Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8c3e80ed1ea1a2443c7eb6ff5a922e99","sha1":"4bd7eaa4d523d763cb1ccf5945264fa69edb91ae","sha256":"4a3f76364d5e75048900271b374c49e93d83b49bcbe10ece82628f17f7420aeb","sha512":"68d37fbbf6ef9965416613919bafbbcbeecfce643ee834653429c9b8bcda264c114d8d13227f9062bd1d1a2b391603b112ac17e45c2b7968b28bf27596b89b5c","ssdeep":"","tlshash":"6cf00580a0ddba041f42718070fe19ff517e514d350925d0b055e4e829724b09337b55","size":494,"data":"","first_seen":"2026-06-09T19:05:36.988619Z","last_seen":"2026-07-23T13:33:57.342301Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5cddbd7f08653dcc8ee54f52aca9e54b","sha1":"2be32320143133a362516b82425e80f7b2338787","sha256":"4b61557b911ba8e2631097a0adaa37bfced3394a1f4462f5db68ece29afe2339","sha512":"6b92b7038798e5fccd05c0b4e273a1bccc45625d876d907ca64ae96c81684003e16b09e6ab17445ebe5d4eecb5b66438cf75d0912a27608b194f0855cabe317e","ssdeep":"","tlshash":"c0e0688976951a1a9e430292b5ef39dc80664d3224ca2162ee98c81437367bcc13fdde","size":381,"data":"","first_seen":"2026-02-24T15:47:27.770533Z","last_seen":"2026-07-23T13:33:57.343635Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"733fedccd0eb7f5c0e0e89883330c0e3","sha1":"5fbd845da9dbb307db4cb5b44bf244b9f8f2bbe7","sha256":"800a6a80e45569efe00dc19890735054ef6d2f19b467933d9733a4ffb17ef514","sha512":"868fd76578d7c44e151725b6c2272784e92d30c581fd1525f3e64172cc13a8abcc6f8870ef2d2d58752106fd0dfbb4aa6f5e7f8bd92a268e8d4fc6a62f3454d7","ssdeep":"","tlshash":"fdd022cca0822a0006032248da6f36d4e230c053300d7b52ccd1d88c2f228b0d26fedc","size":198,"data":"","first_seen":"2026-06-13T23:52:22.917902Z","last_seen":"2026-07-23T13:33:57.344318Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2110332c9c8e79c4a0af8a5a945e1f87","sha1":"8420ba764e99f0195c9328bd6aae162d9a380f1f","sha256":"281c571d3d1d8574b2bd53929fe5596732a2feec74ea0a6446b955e17e8421b3","sha512":"7242b4b0687282522cc618e0ebd39ecc2b1dfea5a648c5dbc259647751b17ecf4d8798c923d36f3600ab2592fd8c0195482075b27293a1333e7a0d2c201d86fd","ssdeep":"","tlshash":"20c022c9b1d37d002a02504120ff38d8e020001b35880a6a8da8dc4c3f320f06133fec","size":189,"data":"","first_seen":"2026-06-09T19:05:37.014381Z","last_seen":"2026-07-23T13:33:57.345465Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fe38a231daabca7ee9331f1601a08e31","sha1":"22bf55758c90a53410cecd193fcb1c3216367d49","sha256":"f5bff08a53c4d278175a0a1220019e39232feb024918177f6d0f522dba4e8239","sha512":"6178f6fbd722656b8158b1b081cd981cf60e36eef4fe02d52f733a4df6d2e2570223735d03f97e55563633cd69218cebb85f2685a8d3ea38f4fd2a7f0498d266","ssdeep":"","tlshash":"77c08cc4a0c27d002606641010af24e49024402670481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-07-23T16:00:03.114033Z","times_seen":1333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.111569Z","times_seen":2091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d785a56a972c7c7f9e0cbc20fa511501","sha1":"93ecd7fdc9c1d3599bb45334400bf94cba349a8d","sha256":"7845e493f71d47bf36baa32f507ebf10d8607f6280aea35a75926bafd2a046da","sha512":"05e4aeeb11fe2a8865e7c387ef0680de826de644ea552ee0a21572e4df66819bbe1fee69fd08157a538fde439025f52ca5a3d2058059192b355aa55186d115e5","ssdeep":"","tlshash":"82c08cc4b0c23f002a02a81128af36f89024842a70481b438ce4d8582e230b08233e9c","size":148,"data":"","first_seen":"2023-09-27T19:17:21Z","last_seen":"2026-07-23T13:33:57.347742Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0433c078d2a534a60f99cbb505b1ec50","sha1":"265106076abb3c29d7fd0d43739c7bc8e08410dc","sha256":"512e8b9754663e0178c0992f2500818fec2df7054b76dda16eb0fa1431817be5","sha512":"512323ca250dc2713d79f9b5477e4c0a3a95d272d23127d3d65c0bbf83850976f42a859f3d752acf6bf0906d2167bedfa6e4ac54bbf547939ef8e2f66371c559","ssdeep":"","tlshash":"2cd0a784b19b2a101a126175907f34f491744415f14d0b529da4c4cc3b5a0b1c333dd8","size":210,"data":"","first_seen":"2026-06-13T23:52:22.851523Z","last_seen":"2026-07-23T13:33:57.349305Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c6d24244f0bd48b69e16521833ac9994","sha1":"38d343ba2d1fc6651a88e84fe17090f080daa530","sha256":"c7eb32fd530134381e061675f075a3e1b3d38d2076a24bafd0ec25adc6ce199c","sha512":"afab5035f59e9ac0f6bc670b2b9830ccc9a17d568176061024ff9d7ef5be675163a3d2d52dfc2ac115922574607a5c902ccf2a95f85dcebf0c3b5080764d1b70","ssdeep":"","tlshash":"37c08cc4a0c22d001a06642120bf29e4a0244026704c5b128cd4d8492e231b88233e98","size":143,"data":"","first_seen":"2025-03-05T15:28:53.468189Z","last_seen":"2026-07-23T13:37:23.557499Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b5ac377f616283eeed8fdc34e97b3376","sha1":"42d76ef0a404357ae06e09120056bf2a389acdaf","sha256":"0c0de1c55953d2b5001f3a4e5d8cc6052c52c8e478b6b992cf58676372c1c65c","sha512":"a0b3a0b136ad3ca1e14837630db7ef79cd7f749889220dc4c28795585b975be233ed3b11406e780e5dab09371a6141aee4d53f6adcf61c6a32dd0626c1d8a8f3","ssdeep":"","tlshash":"39d023c560927d201bc36510959f24d4a534d017b4057752dddcd88c2d524f1c337d94","size":205,"data":"","first_seen":"2026-06-13T23:52:22.798143Z","last_seen":"2026-07-23T13:33:57.351527Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b6ce6947773085721278649d83b7c3a6","sha1":"b7f4faf6b6844009b50c7040221f81e2dd940612","sha256":"3054fa372c7d3e059513dd7d40bb42eb6b91fc3e13645798cc0c1a2dd5705ac0","sha512":"bb5e544490a8cb2c26506e397d028fd28ec3c8bad4dc479e0b487aa0126bb969fd394c5c960923ddf13379b27aede44ea9a1a97c8d951416ed9e7448e8ba2148","ssdeep":"","tlshash":"c9c08cc8e1d23d20260a661120ff26e4a034406674485b1b9cd4d8482e620b09333fa8","size":150,"data":"","first_seen":"2025-04-25T08:37:00.641817Z","last_seen":"2026-07-23T13:33:57.352514Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"44f88d3c80bc09fbd14220a62070b132","sha1":"1c38a981d97a9e216b99105f6471778d52b7c906","sha256":"061d8a59280c9eecabe48f52b4d84827bc9bee91f9f71eedcc42da5e154f1aad","sha512":"10ef249d374fe212f3e40bc809d7cba6903d70b1133ef257295a6399e9c69b753418719d889af48d0c2ecc8e475bf582a9003b09e5834e336d870d1b689681be","ssdeep":"","tlshash":"dfc08cc4a0c36e201b02691011af25e8a0248426b04c5b43cdd4d8482e234b48233ee8","size":146,"data":"","first_seen":"2025-03-17T15:48:28.332542Z","last_seen":"2026-07-23T13:33:57.353141Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62a1e8914589074aeac2f019badf6dab","sha1":"ad932b414f7682b714945d7437c6435d455e3b3e","sha256":"b1dc5c64fcc6dcc5ffa60a53a5290dc4d63c925e1061a5eb1dbc434d8865fbef","sha512":"6b781bd1266d2e59e7c47ff7387110014db6dcbd474150ca7341643a097841ac79f131dc7e9082c547909ecd2ee7d44024b9b4862bf039cf2dcc88226c4dfc6d","ssdeep":"","tlshash":"71c08cc4a0c33d002a26645814bf26e490384027b04c1f029ce8e8882e220b48333ea8","size":151,"data":"","first_seen":"2025-12-18T00:45:38.466611Z","last_seen":"2026-07-23T13:33:57.354188Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/main-CiMQjII5.js","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd1759292be637a432188d019c130ed2","sha1":"b4cb60f3443460c6a8e6b81883834d39d2a6f5e0","sha256":"ef467be782da65d802f8fc975268be09e264e1a5ac089495306f9c1c7bd82ae1","sha512":"e67d50329c32e37d05a91831c94036fc086b1510eacf6e1cc1b8f6e8d463d7410d2accae8caaaca89437308e7682eea00470d5e7f59a44a5041d19a0d7739867","ssdeep":"49152:RkH190/S6LSfYTbO8vCcwLSrSJxWNTFQBjN3o3fQT27uwTUVyS4+oJj/Nin+zWCO:qV/H30z/HaX","tlshash":"21569e15b341b1b457f7419220aa0505f2386f89f493c098f6ec5cdb2a9ad6e73be738","size":6334811,"data":"","first_seen":"2026-07-23T13:33:57.355963Z","last_seen":"2026-07-23T13:33:57.355963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0fb90a36ce0aef75a34a278eec3d447","sha1":"2e007495835ac759001b7f460145e05d40c975ff","sha256":"616c5f76b6c528e0b8b65fcfc4480fa7383efa59e04ae379d54534d56cca4a6d","sha512":"4f1fb473823f663683194f0bb1e77301c9b956fd9eaf6173683eff7c83867b4a6923ee4de49d0f87f095aa9640d85d5dbea7bb42abdd29479ac6613c75fcf730","ssdeep":"","tlshash":"03c08cc8a0d63d165b27a55026bf28e490284437704c1f66dde4dc6a2fa24b49273eec","size":164,"data":"","first_seen":"2026-02-24T15:47:27.786737Z","last_seen":"2026-07-23T13:33:57.357606Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7a622fab173dcab614b36c7df0bc151d","sha1":"702a97bdd13f84b3c54e6ad46ca1bae7f0ad1935","sha256":"de511bc0d1a6de37cdb8d7cace443e1c50b6887b1914837d5ef016a93ec1cc5a","sha512":"cce63e462ff84ce671a07f23021fd74412151abbbae27029f2bab7ae890d20c862c4a4d3dcdacbdbbd0c7a9942fea21e2b47f0b9c816660957e991f0daacd317","ssdeep":"","tlshash":"5de0f1ee91821c05d3221781257e2ae65433065ab0ce69ca8cddd918764357c833ba95","size":398,"data":"","first_seen":"2026-06-09T19:05:36.999449Z","last_seen":"2026-07-23T13:33:57.358249Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"25000a4feb76a4809c9d3766eb0edb4e","sha1":"4598b354117e7578d4474cddf32548c26c0b2118","sha256":"4076d89113ddd94b110bff7172e91914bb708db6171dc0250b1ad8c8a8a36657","sha512":"180e6a9b5eca762eacf8ea3e4dce2fa7e32e101cf689ae20ef5ce35a0768284c639fe1cc3dc3732b3005e14595c0280422b62b7e7e8a865c392ff72f97ec601c","ssdeep":"","tlshash":"04c080d5f1c36d1097515451617f35e45034541775485f068cdcdd442f630b59237edc","size":171,"data":"","first_seen":"2026-06-09T19:05:36.968516Z","last_seen":"2026-07-23T13:33:57.359515Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1b4bfe874da891b0499b6472ce74f53","sha1":"64553170f85d537c909567e6c56b91dc7f0c5051","sha256":"e17aa0fd98ff27935c0582138c45321cff50a07dcd98071399cb04e20d77e718","sha512":"2e316e6f0aa39fe66a7f6123260a2c2945a6a3499dcf9e64f657a2416d6809ae1acd701863701c00560f43af473fe5a549b5823cf5be79cf667f897631bd4061","ssdeep":"","tlshash":"70c080c460d73d506d125915186f2cd490254417705c6f12ddf4dc443dd74f4a133e98","size":166,"data":"","first_seen":"2025-12-18T00:45:38.437245Z","last_seen":"2026-07-23T13:33:57.360508Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c50f2543013464484d1d01580381248b","sha1":"04eb352dab9d0c70a66fcabdd68ab10be2624794","sha256":"6e20a689a689b78f57edaa4f5fe4ba6faee76f268a03803df894cccfa35ec067","sha512":"f5c2f3961a81b65306df609ae42d58284c37acea07ad79dae9bde6e1ef5b7146bc47ce5a5d92db31b8315473a68705dbdc292f3fe005c7e5f1844b52f665a34a","ssdeep":"","tlshash":"b3e0207661432c105d13785412bf26d4563044d67099378e9d88846db7565f4e13bdc4","size":338,"data":"","first_seen":"2026-02-24T15:47:27.776413Z","last_seen":"2026-07-23T13:33:57.362015Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"00f4fcc936a9e0666115ac83a3001c8a","sha1":"772ffcf67ffff5de658f09c428ae4aa1df624c6f","sha256":"91891bc2342f5a7f8bca4400ecb26d1971686020e8b68c5eb48176c630575f24","sha512":"ddf478f1c91213012ef1a5a83e64ecf36d131fdb0982169be011ee6620ea2d556edd1b1a3eb3f5006990675ff781c459ef36a2f6d70e35760acb75b3d17c4c99","ssdeep":"","tlshash":"b7c08cc4a0c22e101a0aa45020af35e89024802a70481b028c94d8482e220b09233e98","size":138,"data":"","first_seen":"2026-02-24T15:47:27.794781Z","last_seen":"2026-07-23T13:33:57.363354Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"926ad28c98be26c2ab7d8f231631853c","sha1":"c1c7788df347ea5ab2369ae95456a8a1f7d9f150","sha256":"ec5e8816f60cbbf34b660d2d1455234d92295ab1a210868d6bbfeab7359e438a","sha512":"6f8eb48bc8638821747a26fc6370ee240e58d47699acbe5a1fb2bff1b25d62c6918f6df77dd78da3bc1b3e3d14eb849ccd4e0d1e01593294187bfd509be2ebdb","ssdeep":"","tlshash":"a5c08cc4a0c22d001a02641410af24e49024402ab44c1b029dd4d8482e220f08237ed8","size":138,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-07-23T14:11:53.14727Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"41f0e24d6db979ab5bfaf9f0d7a69316","sha1":"ffa297bc0fe41673def70dae18f84e889a4b2a11","sha256":"29c08de3287d4a17e25f8ebf185a22647d98580acf8a0de63acbb2e1a7f5c28c","sha512":"bf9765f0071f36142b97d7cd523e126968a1996471ca0e12756e2368eb40a654a8401d71b9d0d61b85d38687fe66bcf5e46b96c300a03b9f31fbfa452ebf9807","ssdeep":"","tlshash":"bfc08cc5a0d33d042612641120ff36f8a028442675486b478c94d8982f620b48233fbc","size":153,"data":"","first_seen":"2026-03-09T15:24:05.440735Z","last_seen":"2026-07-23T13:33:57.364975Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"334c1df9d7cbc3519a286d40bd5ca18b","sha1":"4fdfd44666132f3539c0c90fa78b7abeff651ced","sha256":"0e24d6adc0a7c495e77fb86233ff7417053d1262b0fd0500c3e449a7ba621673","sha512":"2bf2f7bdb7821f75cd98877cf9f6066fd0c8dc2997bc9a26ec3206b8501d4cd6a189f960f8a4c8aab186a295d509eb0df47a8d13e9c73afcb90e87a1447f581d","ssdeep":"","tlshash":"b6c08cd4a0c22d002602681010af34e490244426708c1b03cc94dc983e220b48233ea8","size":141,"data":"","first_seen":"2023-09-10T00:20:07Z","last_seen":"2026-07-23T14:06:34.249925Z","times_seen":1590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"111a92c4d66066afbac573d73ffac4bc","sha1":"e2591c0e1b889ddc1afb2a61ca1474c167cf46a8","sha256":"7cc231a763aedad035bcc99bd8aeb1ee8274f104b68da85a379472320a848d97","sha512":"898c23b421f5bc21b0ba1b3ef31df7f18a0d4c7606abb4e35706d6bf8fd17fec9e22d65ecf91683b91c7c1c8ccf276e8dd1c0485b675ac5fa2031f9b7b20d5a5","ssdeep":"","tlshash":"06c08cc5a0e27d0016126a6024af2ae49028802ab0889f468cd4e84c3f630f4c233eec","size":152,"data":"","first_seen":"2025-12-18T00:45:38.47717Z","last_seen":"2026-07-23T13:33:57.366694Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3a1eb9e6200cc8e5af79b9172c30728f","sha1":"c1bf1dfb3d6d38d6871850fc88fa773b7dcff564","sha256":"f0e6c065ded7bb20a2a5a987e3ba510e5941fe8172761bf88d183806157d1195","sha512":"b4171d5f4f97bdc6cf2280ff19e6f25ae660bf870ec2830f0da02f0ce9577366566e820cce1c2770b6bed5999e4e19f57c4b4c4d235b13f6beea0aab1f4d06b5","ssdeep":"","tlshash":"67c080c861c72d006a01681511bf35d450344466708c2b429cd4dd492d624b09337f9c","size":163,"data":"","first_seen":"2026-02-24T15:47:27.802215Z","last_seen":"2026-07-23T13:33:57.367889Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b6dbd65f0fcb5d8c3890b4963080a7a","sha1":"be30033256e18faf1b467cdd8a276b84af36f8fe","sha256":"d4b9c0c17813973f262fed0aea22dcc2382d84e03c6c69067af0f7cf23e8c3a9","sha512":"908c620106b88737676a2d1bda7f3308f3299f5263532522a39e80099c197da4999ee31515f694be280583bd3f2b8a6ca962ad61ace71ee60cca94a988557073","ssdeep":"","tlshash":"0dc08cc9a0d62d001602641020af25e4a024402a70481b138cd4d8882e220b08233ea8","size":136,"data":"","first_seen":"2023-06-03T18:56:32Z","last_seen":"2026-07-23T13:33:57.36864Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"80adf127d675f8056e20db451748a2aa","sha1":"b190990b1148c68adf01f039fbb9afcaba84c6b8","sha256":"7f280c2b4c4402736eef5e78a03a4e60987ff9a3f5ebcaeaa7f06e6b3549606f","sha512":"3b199f2b32b5c4fc6280237a345e44147bddd64d935dbfb4cdd6e69ecb81e94436548eec6d0e5ee8d6fab83194be3096b2e66fdcba685420549c1644992a40db","ssdeep":"","tlshash":"54c08ce4a0d62e106616691018af24e4a024402771481b428d99ec482e220b08233fa8","size":148,"data":"","first_seen":"2024-04-05T15:11:03Z","last_seen":"2026-07-23T13:33:57.369912Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b8ff8e2f56afd6e141e9bfb2450b32ed","sha1":"a6b25f3182e4efc630d722f37d6f1260fb18dacd","sha256":"9915d5d3ee378dc975406b7ae5802d079d8a871fc60e1c1ff06733bca1fa2294","sha512":"efbd76fc206baaa8f217f97538a5cf361bc6095d5f6a96b678e502d7086914806ff71cd9505093e76155d8fd60f8037762baa6b4cc53bc3cb07b27480fcf3d1b","ssdeep":"","tlshash":"d3c08cc8f0c33d042602655020af35e4a038842b74489b528c94ec593e620f4a233ee8","size":154,"data":"","first_seen":"2026-02-24T15:47:27.795636Z","last_seen":"2026-07-23T13:33:57.370507Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1784813582610","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","size":17618,"data":"","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-07-23T14:09:33.243526Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"894f96101bcb85e87ff619fba26c2a67","sha1":"33dd3e22aba5bc5ad3a61e1fa441201d1d84be22","sha256":"7ca67e75f0dd9a151e326bdcd8afba6c71be5209c0ea8edd525e8db1f64536b1","sha512":"3dbb5db67298f14a8515a08c845238cc76c33c81add73e0f5e4e82f5b8bcb1725594b755fca7f4771e5f14ec08ef6edc33e0f82dd118849a579f5eee06b21cbe","ssdeep":"","tlshash":"96d023db72871d10e955b010507f34f8543c9452714517469c98cc483f561f4d133d9d","size":210,"data":"","first_seen":"2026-06-13T23:52:22.868033Z","last_seen":"2026-07-23T13:33:57.371627Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c032419ea1b2e61a4c0542ce26bc755c","sha1":"a3f9c2117f26038206f81ba5e73de36d5d0e38d2","sha256":"3b6538c8676a2ffa9f3c9dd6868612c60cde07d47f9989f4325c712b0df71106","sha512":"9d84b1aaab540ce8cb62be03004699fc2e96614d064737d0cb90f42c49e716d5db5f1c5bea26a8d457b166f7fc491903398a448a9aac5b2e217cdd800d08d22d","ssdeep":"","tlshash":"e9d097c9b0c258008a022080426f26e550308011204806768de8d8443b714b29277da8","size":224,"data":"","first_seen":"2026-06-09T19:05:37.010741Z","last_seen":"2026-07-23T13:33:57.372722Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ca597cb77991809c407e63832b488f2","sha1":"974a9c235be19d32e7dd8be3df4c5d2be7845eb9","sha256":"1d648a57b636aa267aa3e15d2b6f0d3e7ed431e18f1c82251992b5109a5d99a9","sha512":"bb95685d557fca96dc498fa3cceff5654dfb66f7effab66ac93e221230fa9c1e747609439e860ff512fe2ec76f979e220d5bfade99871c59a410b50072de2d5b","ssdeep":"","tlshash":"adc012cca0972d011621545461ef28e46224805e7148aa179d94d9583e621b69227e98","size":180,"data":"","first_seen":"2026-06-13T23:52:22.831221Z","last_seen":"2026-07-23T13:33:57.373831Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"53d2f148718a2e669788145da8118a34","sha1":"e7fd49274429bfe2fb5e78aa649f69b960d33652","sha256":"f42c1df20ff92708d2b3d66b9cb7484db25cc9d058f3f57f94093e44787f4900","sha512":"c1eb57c9e84f325907f308691381b63591b3c17617f54ef64b95b2655f5e63d5bdd2936e5618e9b210d43f0a62d2a9daf6db4dd93d30f870250837f3e9a46aba","ssdeep":"","tlshash":"acc08cc8a0c33d00671a681215ef26e49028842a70485b638c98e8492e620b89a33eec","size":152,"data":"","first_seen":"2025-12-18T00:45:38.438353Z","last_seen":"2026-07-23T13:33:57.374503Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5cc656e7767b32f719f3a17c8919bfc8","sha1":"8a3be130517e12a9fc984d4482e215968e7cedbe","sha256":"0b5197075728ab9411e29146e8f5c93a1f883f760160f5667e3c8256f07a439a","sha512":"8b2d5a0a1f9157107bc14b2b9c2bebe4d087ae09faba8b4b761df0d44297f2c309f4e2f5c55db4ae7a9f347f23a4d8103adcdf51d62c821ca7eb900af419261c","ssdeep":"","tlshash":"c5c08cc9f2e66d102602645a70bf78e8a0244067b0896b528c94d85d7e731b98333eec","size":162,"data":"","first_seen":"2026-06-09T19:05:36.946238Z","last_seen":"2026-07-23T13:33:57.375126Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"170a0a2adabfa3df9f178716bf942841","sha1":"ac6457948b3f8142f8fbe331f13bf702b7e0a54c","sha256":"45bce9e470f9daf35851b9e83b496ddfeeb7920ceda2b2881eeaa512a9188eec","sha512":"c47f0ea38e1ebf1cf7a21d511f80eb073f3eb84d44c66a4881fdcc9f704dcbeb98b1380fd8336998eb01d4dcfe3ee8e685dbc3982bf0e1fefaf9964238689567","ssdeep":"","tlshash":"12c08cc9b0d22d106a0a641464af35e4a02440a674481b138c94d8892e630f09237ea8","size":148,"data":"","first_seen":"2024-04-05T15:11:06Z","last_seen":"2026-07-23T13:33:57.37635Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-07-23T14:06:34.234837Z","times_seen":1243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4258e14f9cef4db12cc722aab1da892c","sha1":"17e64549a586f1a87d0ad879f186d951ea5e67d9","sha256":"7ccdb567936df32382dea42f3a2a77e118864d8e4ee02d177d262126c528add4","sha512":"5b3ab295d3dde1a6bc72fcdf36376806bbbb0eb5bc166815e9533a3b702b90a8a1faa3b4631f388817e5c69e07b21b4ed24ede1d0a0a076a4deb0cf4abade81d","ssdeep":"","tlshash":"82c08cc4a0c22d101606641010bf25e89028402670485b428c94ec482e220b08233e98","size":137,"data":"","first_seen":"2023-05-25T00:15:57Z","last_seen":"2026-07-23T14:06:34.211842Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-23T14:11:53.117562Z","times_seen":901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9434f63511e5789a775c755d10e5dc08","sha1":"c0e4014d2710bb22ff5217b3639d5002be36c7bf","sha256":"bbec1091c921aa680fc863a6847f99457677d74fcbbb4c3d7ec501af68e675de","sha512":"f8ea1a7d68fcce8f93aeb6aee715a7c6514eb32ee60cd69bbf999cff48a9c6d43d2ba406a2be8d3c4a37705d4a4bc25d962fbca92f7859ec5b49ec526f0cb7e2","ssdeep":"","tlshash":"c6c08cc4b0c23e002a02641028bf35fca028842a70481b038ce8e8482e630b08233e98","size":148,"data":"","first_seen":"2026-02-24T15:47:27.769571Z","last_seen":"2026-07-23T13:33:57.378747Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4a36c7c58e9ba8c41eae2e68d8eae3b9","sha1":"ef292c51ea3982a519bcdb17f862a14f435eec99","sha256":"5c41435a6bf85b970d9870bc0a238c36b82b5ab67a44cd7b12e2756fdb645bff","sha512":"4afa042a19ead074effc9da3db514e8f1cc6de4db07469c0963091ec22b197eff7ee1783ef51b6fe57780d899d61c319e3ee231a6dec6c3483fbff5ea1efe1de","ssdeep":"","tlshash":"d7c08cc4a0c6ae001606656050af38e490244026b0481b428d94d8582e220b88233e98","size":141,"data":"","first_seen":"2024-07-17T11:16:22Z","last_seen":"2026-07-23T13:33:57.379943Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b13214394869cfc2263a80ebda9e97c2","sha1":"fd3d0446b76ba18f204c51bd7ae6f1bcfa735327","sha256":"2e3e5884ee90f598aea5fe2e6145b26de946cee0b0e91d938847fd98a131507c","sha512":"dad8bff9fac46e795e696e5476a920621f8620d23b38e50d6f992ee503e6ea8095b5824cfabb09a288e2e3a450347e9c3e20e18a946e71ada0e11911a32d6dde","ssdeep":"","tlshash":"02c08cc4a0c23e001a02a41014af75e49024402670881b528cd4d8482e630b08233ea8","size":140,"data":"","first_seen":"2024-11-12T08:48:04.739405Z","last_seen":"2026-07-23T13:33:57.380577Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f7ef69f55c46cae7380ca216e5a29307","sha1":"ac864cd7cdd3e51255e1a49df3c781fc503a8058","sha256":"d3f0b55093e74d578eb2249df3874ec758a2638340a0d9fbf8d908835ba8b200","sha512":"5f6423e047a62358126717f2c8af3873a5fd0f8ecdc023b896019c1211e91d6d7898b5d50103dfecfe0c6d59854b64b5fd214e8028065283ef7230c37698cca6","ssdeep":"","tlshash":"82c080c5f1c36d0017626451647f35e450254826744857568db4e8493d724f14133dec","size":167,"data":"","first_seen":"2026-06-09T19:05:37.022607Z","last_seen":"2026-07-23T13:33:57.381811Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5d7f6a8ecd91ebf6cc974297f65c918","sha1":"33887bc7c32f4f1ca776e2da09a07ecc28e7cce1","sha256":"73f2d76b712bcad7f6c8699c180afd8cb5e44451c9a8005e4e8b5818a99dae6a","sha512":"91cac552941ef0df049023c4f9fb67c51f0782eaaa9dda76d4109f1435efaaf4991886d0eedfb47e33c508fb3b05b44cc946fa1877dad879398a8071b67a02cc","ssdeep":"","tlshash":"65c08cc8b0c36e00160264101aaf25e4a028402670482b128d94e8483e230b08233eac","size":147,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-07-23T14:12:00.74185Z","times_seen":3187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e4a7b557a6bc7119eb92d3bca7fc187e","sha1":"3b5640116e7240ae869461b4a46a52b9764e5041","sha256":"e28559aaa8226d127b0422b6ae5f5f021a92f31da8979cfbae0d0bb49aea6dba","sha512":"93480da7d288d56df5147d57185d3f07a81e855381e580f4a18822c27b5b50d75fbeed06debc986a10fb0bc743e0e97ca4e159671aee2e5a799a790c9339c5d2","ssdeep":"","tlshash":"9ac08cc4b0c36e101692681010bf2de490348026b48c1b038d94e8492e630f0c233eac","size":146,"data":"","first_seen":"2025-12-18T00:45:38.476066Z","last_seen":"2026-07-23T13:33:57.3839Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"279fc00ed3d23913ad5d00cd8bda03d5","sha1":"e8b887d0160322fd488051608ecdfd6793c5eea8","sha256":"9af36bcc1d5d737b40a5866cbbe0c6db65d72a218929a14e586f70b6ef2d4d66","sha512":"4e15e7c6046cfe974112f36aab7beba2d6a81c99176b982a96018c0682aec41ee88742b0121ba99f5d5b8d4f592d7cf41c064dd559ba000c2e2a1132001d8a1d","ssdeep":"","tlshash":"04c08cc4a0d22d102a02791020af35e4a024443b74489b528d94d9493e620b08233ea8","size":148,"data":"","first_seen":"2026-02-24T15:47:27.784082Z","last_seen":"2026-07-23T13:33:57.385038Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/i18n-BHUysqrf.js","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e55b7dddb1235f5a46844b2424fa33e","sha1":"304d20c5939e71c2d3213c150cbf22d6fdbf4502","sha256":"008c399bde6d344279cb06908636ba5c2998f1df8edac0a3138e72ca20936df6","sha512":"f2369aca3afb4ace505fcfbde58e94bfce6f257da87ef835b2a8a9ec2b855028bfcea38d5f27299351032c62d067dce551560f986b098a5ec671b653960cc5d4","ssdeep":"768:yKQiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:47Uq0+/YjQ9vau7K8uVoV","tlshash":"bd53f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","size":60838,"data":"","first_seen":"2026-07-23T13:33:57.228224Z","last_seen":"2026-07-23T13:33:57.228224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbc4535837e4b66304063b672a89d710","sha1":"08e4f0d983b92af61639474f049dd0aa01164366","sha256":"c2cee43bb19be2e32f4ab66ac25217f46cb450051fc9c4039cf4bee9eda1f4a9","sha512":"1c29392ff9fba4a70b305c1cd37398bccf5f74e2e8147948e9fd645b07cd592308ee2e8f931aeb601d41832c1dd2d5bca9e3d5c91139e5cfa0d8ff4964722081","ssdeep":"","tlshash":"74c08cc4b0d63e002602652020ff34e4a0244026b05c5b829cd5ec682e220b49233e98","size":150,"data":"","first_seen":"2025-12-18T00:45:38.457941Z","last_seen":"2026-07-23T13:33:57.385782Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e659971d9997bdb6ab9c6b6845f820d6","sha1":"d2330ad5788a5c58523c66090bd7db4d5a0c5d77","sha256":"c6d0b5c8efa8cc001dae1a5402c60b3985e0d6bb8fa76382823678289a92eaa6","sha512":"c15af3da307550ae6b3af0ef9b86085d3e9fa5b651edfebda4d71e9dcd7858eba90fed5ea62c284eb6902cbda36029c89643b95931c30cbdd858b0e0c3f6824b","ssdeep":"","tlshash":"70c08cc5a0c32d601606a65068bf39e4f0344026b1485b02cce4dc583e2a0b9a23be9c","size":158,"data":"","first_seen":"2026-02-24T15:47:27.785697Z","last_seen":"2026-07-23T13:33:57.386843Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"383bc7e6106e3a227eded5fa51dc268e","sha1":"250946b832b9314351ddad4536931564b5fe8cf6","sha256":"b2b7e09ae9104512d3c71b9725a3018e34431b774bbcd2ce55964aa2b54d7617","sha512":"c783710ef2ace5f256f3183b5d79c8315465b2b10e3f7c38c22a659a4921827d3b3bd70c55d513fdf8b89704ef4ea137d728bc2800e108be8f1e62f588211eea","ssdeep":"","tlshash":"b2c08cc4a0c62d102602642020bf35e4a024402670485b128c94d8482e230b08233e98","size":137,"data":"","first_seen":"2024-08-20T15:22:32.860195Z","last_seen":"2026-07-23T13:33:57.389461Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7b3de7354307d425e2c87cd30f4ede6","sha1":"dc66414ea415cd874318119239b4af134ba2567b","sha256":"6ce792f41f1371f6d74e42988b05237acaaaf3eabaf18d6f6c7b56b2e58c4823","sha512":"15313ff7e64d913b8e7a1bc9f0802d26ec31225c1e0be7fa325315bc6cebe8d5e070cba2c58e83993c461951180bb947eed81bd1bbd165015772906c7b2599c9","ssdeep":"","tlshash":"73c08cc4a0e23d001602641010af24e8a0244026704c1b028c94d8882e220f08233ed8","size":136,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-07-23T13:33:57.391078Z","times_seen":943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4bfdf16abdffd74ae0a1f6ab5de2675f","sha1":"51bdccb0712f69275df3f79e0285899765b44fca","sha256":"219133529ec506f4aba77301ec6cbc2960555957f0e9171c143ce7120aa51338","sha512":"be2d941c7fe15ebd1b7dd340271e7f8fcb159da6865a8d5fc443281bc6fb75d0d705a9cde6aaa29dc5bb7461491dbbba03360e8c1af3ae353172cd9b14a9d9dc","ssdeep":"","tlshash":"14c08cc4a0d72d101602649010af24e49034802674481b1b8cd4d8482e624b08233e98","size":142,"data":"","first_seen":"2023-05-25T00:15:57Z","last_seen":"2026-07-23T13:33:57.392454Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8fd34ab164763afe496a2e341c2f9d82","sha1":"ceaac86398301f86b8f45e81e645649ff52cbc62","sha256":"eb4aefbe9fa625aa18e75997be453d5668447322aa48d1f958d082d3616ff307","sha512":"4aef08b79aadb8364f6d8cb5545294afb01b29b1738998b7455779e1453e99603f6b7fef876994d03dd3af3efdfdacc909865a95578193f84cfd7de5ee09399e","ssdeep":"","tlshash":"1fc08ccda0c33e006602681116bf34e891244067b0882b43ded8e9482f634f19233e9c","size":159,"data":"","first_seen":"2026-06-09T19:05:36.948451Z","last_seen":"2026-07-23T13:33:57.393122Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcb31f9364cfac77c46e67f9ca486a5c","sha1":"74f044d36245948b7e6486997b025c3daf5403b9","sha256":"ca8ce59bcf9408f17ff549b3219895ace2e3b291dbe59aa4f495a01fa3d9fd9b","sha512":"4b52289536dd7356cc190f782e60f39c4cadfde4bf5654e6f649443445652c2e06e78a7f5886f806b2c928465341d8f01f54716a228907d0fa85647d88831be1","ssdeep":"","tlshash":"f7c012c7a4867f102615545020ff25d89025881674481b568d95d8583f621f59333e9c","size":176,"data":"","first_seen":"2026-06-09T19:05:36.992998Z","last_seen":"2026-07-23T13:33:57.394422Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95c2aac74c4a0bc332e21d136acdfcf1","sha1":"7e6d87a35c2911bfe57d7a4418b8c4413be418b7","sha256":"698dc64f3710d4a04e3ab9d7bd1586f928ee93f82579f29eb41927627c80cf64","sha512":"f6fd3d3c57ba4aa58cecaf8a439c5d5062215afc3d4b174bc477dedec35c40e4e14fcb3791aa3158f033f0ab3cc894a27ce483e5553d9641ad8fc66c49660785","ssdeep":"","tlshash":"5bc08cc4a0c22e10161aa45020af25e49024802670481b028c94d8482e220b08233e98","size":137,"data":"","first_seen":"2026-02-24T15:47:27.77797Z","last_seen":"2026-07-23T13:33:57.395698Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"813ff93cdb4e67d58de31c021faa3fc3","sha1":"9ab955ce281dc76ea67bb0b384fef8c1af7090d7","sha256":"527b293bbd1521fcad2ff2af6358db35491cbc1b95d6892526ec64da661f25c1","sha512":"19dec5060ce70128d42f6cf709636d618e08634bc04d273a31716a3578e283f1bc7d14c622788ed530d4172c2b5d311c96e1942abcbe699241ffce8af20d2c26","ssdeep":"","tlshash":"c3c012c5a1c26d5056557511106f25d49035445a75889a038ca4d8552a620b08137ee8","size":169,"data":"","first_seen":"2026-06-09T19:05:37.002937Z","last_seen":"2026-07-23T13:33:57.396927Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_3464rpqz.js?v=1769638669","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d00b8541f0369213229467dcaf218cb","sha1":"ac379ecdefe225ff480a381ace80886b113634d8","sha256":"979ed606d695a5fa8dfe0c3975b04e43ffe1169f3d89a8244d8bcf961f815b2d","sha512":"a4f97a055d1dd9125fdb110e0d51b1a9dfc46938a8442e438b79d360af6c1b9099126127092f9245d21e61fb29ef9cfcdfaee7ae0fa93a186dc83d43d8a2c8a2","ssdeep":"","tlshash":"be318e515e99c576193232299b3ba218fb3117031501de033ebd57005f31d85a965ed5","size":1818,"data":"","first_seen":"2026-07-08T15:00:07.812072Z","last_seen":"2026-07-23T13:33:57.283525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T14:19:33.850616Z","times_seen":4416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"46051450e9065a7e6395fb91c3dfe8d6","sha1":"da1c40ec0403368fcd766129e3f1bb4bf8c3a788","sha256":"76b40f9a051433b8cc698c77f8c8e7ec443be70a36d813ada666df9cfee559e1","sha512":"7a2ea12b6e18c8bf9ca02e939d40b7a5f952847cd92d6d9a3a9808035af8af5579d41a3b9261859368aa6684ceb5ce1d82527330b925847146a468ab3a55da2a","ssdeep":"","tlshash":"47e0268a735d7c441a12944675db24dc6428082230499aaecc5085583bae2b09637aac","size":317,"data":"","first_seen":"2026-02-24T15:47:27.78868Z","last_seen":"2026-07-23T13:33:57.398688Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-23T14:41:15.120289Z","times_seen":1728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a9bf4d4102c9dbe62e480846e45d41a","sha1":"9057d98ccfab851bcb2b86316b6717c3546e13b0","sha256":"59802b6a172db0366c8f59d3bae3253acc4a0cdc66f4e73ee07a5e5f246aa047","sha512":"a6db634193913f148110717d61bb0804a1757ec16965206f7fbcd97aa10da25f77fbed96755d4420beb06b56e1441a87d4c349433dc1e61af8289252ef1506ba","ssdeep":"","tlshash":"3dd023d5618b2d404b11701455ff15d48029585b711c4b435dd4d4082e530b44633fdc","size":203,"data":"","first_seen":"2026-06-13T23:52:22.805979Z","last_seen":"2026-07-23T13:33:57.400535Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"34339afcb7286463bfd27b78dded2c46","sha1":"11ea0cbdae3b96fe063eb64088a81556f41fbbb5","sha256":"e44261cccfcf45828958947aee5e112bbb18f071dc4e9f03160bd19dfff00ad9","sha512":"9405384dd095ea737f67b690d780ec4487c99659630a7e43a8d34d8d02aadbb42aefadff17e99e1299efaa86f0b5c313f1c882e2f50ea46380ffae1740b91f15","ssdeep":"","tlshash":"f1f0c9c1226d6a6d5ec240e2713a5beda02d304af10b46c0bde9c878aab1030d13ade4","size":526,"data":"","first_seen":"2026-06-09T19:05:37.021703Z","last_seen":"2026-07-23T13:33:57.401731Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-23T14:02:31.988737Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa8588960c59012f9d977127d6bf7610","sha1":"daee0b064e23d10213be018d590d9fd9f8e7c03c","sha256":"b51721c30c3553ea0439e1c195eeecbe2eb5a3aa2aea3b450304046540a53645","sha512":"cfdeb93b9010b43722d2d2b1e2e38b7d1d44b689f19e82b1ff81ba497087ad5b8b2f12ca27e8dac65a7603cd8930610bf274447a750c6e56c23601229da8cd64","ssdeep":"","tlshash":"31c08cc4a0c26d001602645014bf25e49024802b70481b129c94d8482e220b08237e98","size":135,"data":"","first_seen":"2023-07-21T21:54:46Z","last_seen":"2026-07-23T13:33:57.403476Z","times_seen":346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d895bfb11f8e621d98253b9c160c13b8","sha1":"f6031d4d5b9e468ad1daf6d6ec30e18867adaedd","sha256":"d143f486594d9dffa4b8876c08f03bd96376769731ba2c945125965c4ab491ab","sha512":"94402b30bc2389de863776b352b1500341bb03a006a33df2b7cafb6cac465a089473175b99c62a4420d6f9ecc33b0dff1f08a2c2f391a41ce1d6da9b4249b0fa","ssdeep":"","tlshash":"5ac080c570d27f005a11551110bf38d4602440377c4c5b53ded8dc543e524b44137ea8","size":162,"data":"","first_seen":"2026-06-09T19:05:36.947129Z","last_seen":"2026-07-23T13:33:57.404079Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a1f198faf67838288cdfc5779a6206f1","sha1":"a4c7c7a5c9a3362ed601df93233823325a959155","sha256":"a98dbe235bb0f6b9983831856a1cc7096f149b4365e2c4ba0409c831e7a9996a","sha512":"cc76c5fb8060bf7cbd413a7ed5b4eaff0a3769eac59fec692b7f536bed865a0ecaaf4b468c2f8e547fcad41a583c69c917c228c1893975dc6052c18fa3dd6e48","ssdeep":"","tlshash":"bed023c0f0d73910e5126441889f30eda03c0417f10c5f214dd4e8483d221f88237ec8","size":205,"data":"","first_seen":"2026-06-13T23:52:22.892274Z","last_seen":"2026-07-23T13:33:57.405209Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c8c41055950d6c14d135ce9917c1019d","sha1":"388643a09bfe7f8994034e12048f0ba548703ea7","sha256":"c6d2c0900f1d39414124f3fb0dbecb8ca677aa9047ccebd65b57ea55cff5b695","sha512":"d4a9f21e10ed7ccbdc3e8dbd195219d1774e8afdecdd07a2eeca623ccbf02e3a41976519a30678d46ff9fc360c103a42b9f0163dd135dafb7c0531d69ba171da","ssdeep":"","tlshash":"78c022c0e0d32e002202604235ef71e8e0340027b1081f679cc4e84d6a120f45337eac","size":189,"data":"","first_seen":"2026-06-13T23:52:22.868975Z","last_seen":"2026-07-23T13:33:57.406379Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e633277bcd5184216c4633a9aabaf1b5","sha1":"43b3bde47d03e191dcc693f4d5e7c8f690a76a3c","sha256":"a78406bb4a42ca901f0faf0910e5df34782b4b55d5f129ab8c6a6e8b10b4ff47","sha512":"1f89767d5d2289794d27119c5307a24cef78f4439ad9b26b668438571f566eede558b487c98ca013c697a54aafa028b0abd28c733d28a13972ec391eaa9d4ca6","ssdeep":"","tlshash":"dcc022c5a0c22c201212a82031bf25d4a838402270c82b139c80c8883f129b04263dc8","size":183,"data":"","first_seen":"2026-06-09T19:05:36.991191Z","last_seen":"2026-07-23T13:33:57.407949Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f1893626d0524822e2599d8f03a3cc24","sha1":"7a5ccfa9f118adf41e2838ddb11458090c529c78","sha256":"65efef45e7fa08011bdd20d3f395666c798a96dfcf594b891bca06d6a047e58b","sha512":"c04dcf82dc248f2b6ae30ca3983f80bb1bb180f3e1779c7e5385fad8138ac0b3e9ca4908b6ac92a362eb5fb40d8b0ab4fa737f39e20f576530cb7297e356c863","ssdeep":"","tlshash":"d8e0a32b94a2381024151642257b1bc55416424e57d87a06ddc9d55cfb510f49137c2c","size":407,"data":"","first_seen":"2026-06-09T19:05:37.034499Z","last_seen":"2026-07-23T13:33:57.411137Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"28cfff2ef9c104797959ca0eb0a00d72","sha1":"82b8ff3d77135c27e665c6a9991e280ba1f2ee01","sha256":"30b84368e4b56c8057dab2fa3d7bd745c7654d3cf4a5c5a76fe6f9c77406eaf4","sha512":"0cc8b5966c5b06b9d8d5fcfc1983a6085ae80c3559df0c8677ba221277efcdcf81a4616a8933ee5d79453d5265355fd68b8b187c5e1bb14af4ce4abfa31a25dc","ssdeep":"","tlshash":"36d022cab0cb3d102b02600220ef25e8a02c046670490f039c98c8083b722f9c133e8c","size":197,"data":"","first_seen":"2026-02-24T15:47:27.796541Z","last_seen":"2026-07-23T13:33:57.413Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"638e738af5d10269030f2162e325bfd3","sha1":"58f298c482af54a9c6a8489a5de49edb9399e805","sha256":"7926f192f5bc1662c4249870ee6befc066f8492196d7b61fdcd958205f7835fe","sha512":"05fea53fc57ca064106eb3b1d8993e50cb38ed118ee6c54939aa81df3a9f3bbc273910330b23295564ec2595a51e087f4d808694396d3f9bfb3f0db4bb345c98","ssdeep":"","tlshash":"aec08cc4b0c22e002602685015bf39e49024402671885b42cc94e8883e220f48233ea8","size":145,"data":"","first_seen":"2026-02-24T15:47:27.77539Z","last_seen":"2026-07-23T13:33:57.414398Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4df6705e3258c93f67707c4d46ee6983","sha1":"7e910e1ffa110ffcde143a71bed68e73870cb031","sha256":"93e0c2c6c11575927102be1b0fff0671990617267dd8426e5eff3e96b9aecd3e","sha512":"99df390d712a1ed65d0761e1d18abe17f70bf76d20e767eedf4dabd0d4297708a836785a53961d011b0e89f6443e435b733fcda8b7c24400c112da2071da9e7c","ssdeep":"","tlshash":"39c08cc4a0c62d116612651052bf34e49034882670482b42ccd8dc8c3e330b4833bedc","size":150,"data":"","first_seen":"2026-06-09T19:05:37.023462Z","last_seen":"2026-07-23T13:33:57.416498Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"55ca783136458fe6f62d64a3468f58bc","sha1":"89234751613db05536e991239a19662a054fa583","sha256":"8b3f4f249b10cf83f8df29e676c2d1dbceebb3995d59be13cb6e96e2282c5786","sha512":"e75edeacbe64f2d2403669e8d5585fe6eb5c577a0d5aaa2352ee69c11ef9be38d95c06514f0b07565b1754ad6aa679b71a2d88b3167eabe8c91221d9ba728d3d","ssdeep":"","tlshash":"a8e07d9bd4d12e506116781a24df2fd845280226308c8f554cb0d9083776ff04337ebc","size":312,"data":"","first_seen":"2026-02-24T15:47:27.764934Z","last_seen":"2026-07-23T13:33:57.417917Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cb0661944fd6f726de9cb8d41d03f277","sha1":"e3c83deb23d3e7cb6530db0f707d30e911010756","sha256":"dc657a87733e0eea7cd5e17e4bf81aab7127676448973ab55d2a6850c346d459","sha512":"c4a3eaf67ae4ef3318bc5b16cfd45674e3bc984db82cedfabf2b2502205ad9485dfa9551315c90cdf0aef65a2f6b73c807d60056ea806e7472c35d69213e6261","ssdeep":"","tlshash":"3cc08cd4a0c66e506602681010bf29e8a0344026b1c81b43cdd4e8883e220f48233e98","size":148,"data":"","first_seen":"2024-08-20T09:58:59.114626Z","last_seen":"2026-07-23T13:33:57.419248Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4fa1f5a67725a6fd48528103031c6b16","sha1":"212c625f000d2e00d18bd4dcbcd17e41d5921fb9","sha256":"eb005abca178954474fdded92518ece78bb3c60eadf6521ab34ec0e2d1f255fa","sha512":"f3fa6eb0a6923978a6edb08736cec4a8049de505546772040eab31b012c7443468df19583478f0f21b0ab334b910529126c8c52cb2c60fa718d422dca5a33ff6","ssdeep":"","tlshash":"37c08cc4a0c26e002652641010af35e49024402670481b069c94e8493e220b8a233edc","size":139,"data":"","first_seen":"2024-11-08T17:56:15.129231Z","last_seen":"2026-07-23T13:33:57.420052Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2999cd7b7e57e9c5528c0df31fac04d","sha1":"60df8879fbfd80cd88f02380e67316c1c56efda8","sha256":"11f784dd04f10d66769fdbede7e94cd8ae578be6e96a674e05dc60518d431700","sha512":"8c9d64143cccd5f2c167760034513954d03879ffb90c73dba40e3569ac2e318d991a6922b34bcc9be7f516cfc9604adaa3df467d801b80978e212dc9719a7e9e","ssdeep":"","tlshash":"38c08cc5a1c26d001a02791158bf29e8903480277048ab038d94dc9a2e620f0833be9c","size":148,"data":"","first_seen":"2026-06-09T19:05:36.971546Z","last_seen":"2026-07-23T13:33:57.42086Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0621a91238601d476a61eba17ddfa194","sha1":"179a12c5b35cc0648864dd497d5d3be5876d99e1","sha256":"38197c470b209a466f7a46b1803841ce2e9b069a44624d6a3bd6f0c0e355bb5c","sha512":"a0450f6980c9da038e9dab6407a8e6fb192c3a32c40140110471b5313bb6fda6f89a2e0c0b8c269d70c59a8cbe08f476f60c57aa2926bf5151d46e328bd7d4f0","ssdeep":"","tlshash":"b2c08cc9b0d33e00260a785414bf3ae490284426b18c6b4a8ce4d8883e220f88233e9c","size":153,"data":"","first_seen":"2026-06-09T19:05:36.977751Z","last_seen":"2026-07-23T13:33:57.423063Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da20a2938d1ef69781512a8bd21c1775","sha1":"13c1d29468d8747bc21c81d577c2aa69be00c4c7","sha256":"55f49fdd038b35cb08fbb91b536f4d063bb3a8b4614387f906c17ed93265f562","sha512":"c561ff39b49be7668ce14019026006f584eed692a180307f87df1ea5391ef1715ad60119422d445f87496bbb7211b55ba7b6d97f0fde518e76880b2f29bfe963","ssdeep":"","tlshash":"6fd0a7c7f1f528506201728941bf24f050285026f28c1b078c44e4182a161b18233fe8","size":212,"data":"","first_seen":"2026-06-13T23:52:22.839832Z","last_seen":"2026-07-23T13:33:57.429597Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.098872Z","times_seen":1627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"003aaa34c0e3e53213656d2672de5843","sha1":"148bef3d1cae038554629d9e7bb0d6c5ca00d0df","sha256":"ab3c1f6b212fd128cc3b06d7289aa24268eb1047caae48ef63121e5564870d01","sha512":"98d4037233f6536194128b2dbfd1023a8ce379a6e3164aa6a5930550027e1ae22c07ad35ef962865b13ad9a550fc49f21bdb0fc2ec28572304d2885b94cb438b","ssdeep":"","tlshash":"13c08cc4a0e37e102a02641150af25e4a028402ab04c1b528c94e8883f730b48233eac","size":150,"data":"","first_seen":"2025-12-18T00:45:38.456988Z","last_seen":"2026-07-23T13:33:57.431757Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-07-23T13:42:44.993742Z","times_seen":535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3fa73162a341882c3aff0306f556a5e7","sha1":"dc3fc429a9df948667571a8b7be3359a0a72f6c4","sha256":"924fb91391898b55b22a73749e2aab5aa75188954ba8381d22dc319a70f33501","sha512":"a5f7c475c4eaf3f9d215a9612901018a870a0217e8e73515f7b10ee277adb9ca8aa5f9385db205557518b5ae23ec01cca9a0ee24b3d09b977e4b3846a92f89c4","ssdeep":"","tlshash":"05c08cc4a0c32d002602641010bf25e49024402670481b028c94f8483e220b09233fdc","size":138,"data":"","first_seen":"2023-12-21T06:50:40Z","last_seen":"2026-07-23T13:33:57.433867Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d2ef199e7a27124d3a6e5f097e3becbd","sha1":"7cf927c3ea73da3708db5e10ea1abee764a1374d","sha256":"e93e84b0ddec6c55db0e457e78ef20e97e9bd21b9b5493c859991f3fa25dde29","sha512":"dc33114b9f99865e9dbb1ba727612d6e9808304ae52c9dd91a5a58a53b5beff4853674dcaec253b06c4409ecdad92c197c2d5ffa145bc1ae744f73c5855eb30f","ssdeep":"","tlshash":"add022c562ce2e209a5a68410cbf35e46039012670882b02cc88dc543b270bc8233f98","size":198,"data":"","first_seen":"2026-06-13T23:52:22.919241Z","last_seen":"2026-07-23T13:33:57.434443Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d89a34b10799ffb6da8b9efd64a18cec","sha1":"99d88e282f150a46db6d1b4cad22dece68ea0e62","sha256":"1b0ffb23d4ff8c468a4342a808678cb46569b538c84791483464b5b00f13442f","sha512":"07e1c4bf425b3cd18efe35929a479eb856318168d3e0b94f1ab7ff623006e1ffff4249cc864d984cfea9ead2ccfa2876af069368fc2ab420af122f86a573157e","ssdeep":"","tlshash":"0ec08cc8b0c22d001616641010af34e4903440a6b04c2b138ea4e8492e624b48237e98","size":145,"data":"","first_seen":"2025-07-27T10:32:18.381447Z","last_seen":"2026-07-23T13:33:57.441722Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"35bd91ba9eadd9c1d6715805a33a3521","sha1":"2c6150de70e399e0ce5023075c4936c70bbab66c","sha256":"53e3deb4aaa8f3ec248b25d8e37406c521926b5df185bf31fbfa9be4fc914730","sha512":"28dd1200d9875043c1e990b49da139e1dfa4887b646943888ca4c54910ef66e59f71255973d6245f7aff3d5775944f07e66fe3a51d37a2d6a4465437ad889f19","ssdeep":"","tlshash":"2ce02689908834111b421200a2efa8f2e025443ee75c0b529ca594a81e242726377d98","size":306,"data":"","first_seen":"2025-12-18T00:45:38.434121Z","last_seen":"2026-07-23T13:33:57.442364Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/#/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d3edc17bfd88ada1fe0c81d1164fdec","sha1":"2d7abe4a2a2378296afb3f26cb9dba1cee88ff8b","sha256":"8728a6026c664ec9a305bff100c7ef4d1bf0df7e174903dc75491b41f22879ac","sha512":"30873ec9bb217cd604afa1c5168fa01e2d0dc3f0db8013fad2f367eae11bb9c6480ec5cdab810d262bd84a3ff09da4ba37009a91c723d4ea26d887b13b49cd04","ssdeep":"","tlshash":"77d023c660c53d045511555955ff26e1d034441f31dd0743cd54cac43e120b14133e98","size":206,"data":"","first_seen":"2026-06-13T23:52:22.811211Z","last_seen":"2026-07-23T13:33:57.444047Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Swiper Loop Warning: The number of slides is not enough for loop mode, it will be disabled or not function properly. You need to add more slides (or make duplicates) or lower the values of slidesPerView and slidesPerGroup parameters","filename":"https://wincent.cc/assets/main-CiMQjII5.js","line_number":24,"column_number":129610}]},"http":[{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/XAUT.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.191Z","timestamp":1784813583191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/file/XAUT.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 110638\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810EE24003631B8F56B\r\nAccept-Ranges: bytes\r\nETag: \"9D1FA90455F3E0C966910678A6341204\"\r\nLast-Modified: Sun, 03 Nov 2024 12:42:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14148370102076571509\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nR+pBFXz4MlmkQZ4pjQSBA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":110638,"size_decoded":111189,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9d1fa90455f3e0c966910678a6341204","sha1":"145bdb8bff255f92c9c620d27a93960edb79911e","sha256":"e8ee450381bbe0475a4995dd8c00847ddd3000ebf42e5a62f9713946f2b973c3","sha512":"9479e1c57ab8e76cf9e37b9aeae8e1bce0e18aaa41c832fb5b750e9b15e788d9230a71db5f1507d349d9451f6ac824dedb524059ed7f50e77f674705289460b2","ssdeep":"1536:kvTV1GCc70U2WCG9hf7KFAK0B5Z3uIwZmsmUcLVqDBOHqwnU/:k7VY4UrCG91WCtB5Z+pbcGBOKj","tlshash":"d4b3c5cc05f0f1ee9176ce2c94a7358c046243bbce597ab2f311d6df581aba99c118a7","first_seen":"2025-07-19T00:50:04.632539Z","last_seen":"2026-07-23T14:09:33.240222Z","times_seen":204,"resource_available":false,"data":null}},"time_used":1945,"timings":{"blocked":1374,"dns":0,"connect":0,"send":0,"wait":276,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-media.investing.com/news/moved_LYNXMPEL9R0FL_L.jpg","fqdn":"content-media.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:07.249Z","timestamp":1784813587249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-media.investing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 17:24:39 GMT","end":"Thu, 08 Oct 2026 18:24:35 GMT"},"fingerprint":{"sha1":"3F:98:C3:53:D9:55:61:99:10:C0:18:C9:87:AF:04:D5:CC:91:C3:2D","sha256":"D3:BD:D7:B4:B7:2C:EC:CD:5D:0D:E1:EE:2B:CD:E6:20:40:FD:1A:48:64:D3:E2:CF:BB:03:E7:9D:E8:FE:67:AB"}}},"request":{"raw":"GET /news/moved_LYNXMPEL9R0FL_L.jpg HTTP/1.1\r\nHost: content-media.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nCookie: __cf_bm=0gw2wnZJzi2UjQVuJ98mXDOavqqfrrFlWv3Jmc6SR1A-1784813582.9528477-1.0.1.1-X8Qa0vvoDqfdUH0TYihR7IeOEBRsnCiIiNbgFbsHf8HCpcMOv7JiGPkeVG5gr1dHtVgpt_CC2o0_NlzxEsJsqp6dEeP_zA7F4NBEIW8wKZ0yHu8eaUNAUaDk5I71lP2qLr8BLBS3X1cQZh51C_HYjQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 13:33:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23893\r\ncf-ray: a1fb0e185dbfc759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2818\r\ncache-control: public, max-age=3600\r\netag: \"a6fb6ca0f311c3dc1702c13c212a981c\"\r\nexpires: Thu, 23 Jul 2026 14:33:07 GMT\r\nlast-modified: Thu, 02 Jul 2026 10:14:59 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-guploader-uploadid: AKhXX7L_H-pOMjZIr5qncgYswBYzWXVnechdv4CZFRhxy9W8RQxMpi-Vro-_tv0s84RuE_e2\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok, orig_size=23893\r\nx-goog-stored-content-length: 23893\r\npriority: u=1,i\r\nx-goog-generation: 1782987299430166\r\nx-goog-hash: crc32c=etA5tg==, md5=pvtsoPMRw9wXAsE8ISqYHA==\r\nx-goog-meta-rackspace_hash: a6fb6ca0f311c3dc1702c13c212a981c\r\nx-goog-meta-rackspace_last_modified: 2025-10-28T20:08:30.984970\r\nx-goog-meta-rackspace_source_container: forexpros.com-container\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":23893,"size_decoded":24944,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 800x534, components 3","md5":"a6fb6ca0f311c3dc1702c13c212a981c","sha1":"c117f6b07c5d3d85e438e371810f33bfef31bd0d","sha256":"ed350433204c13769685a8e09738a062281091a4db0731036778562711bf5ae3","sha512":"0092b1cb4813e01ed528b9b08c4a5e3215510100d03fca91e976034ff203be79933e8b307bced98d28261f18d32884c0de09acee1067227ee2def8b8d48bbb1f","ssdeep":"384:uLfksqwU13e9UKXHBC/G41ineb4hzogCPxJcoRzoDlHOE+UTrJxRUIlfS3uP+pa/:uLc/N833k/4pPoxyhZ+nkAuPMazIoLgY","tlshash":"60b2e105bccbeb9ad5634d7b405a0b3a3ba50e27351c5c7fc1ae24f58aed252dac5060","first_seen":"2026-07-23T13:33:57.217137Z","last_seen":"2026-07-23T13:33:57.217137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getAllSetting","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.680Z","timestamp":1784813581680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrDckLuYENDEqLiP97xbYNK5x1nspkDbVszNi2OT0lhlaYo2nes0kyHWg3rbhgP1jD45WKk3KDl8DGgl9uTEaPQ0%2FKEnk6qHC6j8O5Ki0yNStSwHYcIvF03%2BzCnUFD0piCrMDNRevfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0df59c46a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":940,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_7-CXcIvExM.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.728Z","timestamp":1784813581728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_7-CXcIvExM.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-44f6\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9tzJ23H8yBIaTISGWqKRv6%2FdoTX0i8mmGigeAlhA1U2MoJeSjQRGmtvzS%2FfUsIo5NdbP9iCzF2ta%2FN8E4wjMCzXNHr8OujswVHcNe6eG6%2BnZAEY6waz9ilA3Q4i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5dbba56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":17224,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fb38101b080f0069632af23879f5d08","sha1":"2264f6840d544cc320b59f9861361125ecbca8e3","sha256":"2894d936fe42d3f8357e682c477c6d515f04b78e5b6efced7eba1c03b68f2d68","sha512":"5c45290fa25cd3cc00b06a44a1e11802bcc17b3a39395ab1ca17eb1fef7451abbc47343736a36b4359a3801c1e32a4d872285f9c1bcf76bd8dea8a009a61c17c","ssdeep":"384:Anh3XfgBbzg7igsb8vd81SJE6W/TvVqF9wj2iLFRQeNj8t8:Ah/sgoUq1SJEzTVk9uLItq","tlshash":"8f82be80621318a0ae6c964452be75bba9bf098447e8b0b4ccef8537b4747f9cd245db","first_seen":"2025-02-12T08:38:06.875638Z","last_seen":"2026-07-23T13:41:50.647509Z","times_seen":99,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/stock/NVDA.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.193Z","timestamp":1784813583193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/stock/NVDA.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3371\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810C390C33534EB2586\r\nAccept-Ranges: bytes\r\nETag: \"2AF35A9178EFBFE02B60220040C86429\"\r\nLast-Modified: Wed, 23 Oct 2024 13:59:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1893519191871131791\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KvNakXjvv+ArYCIAQMhkKQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3371,"size_decoded":3920,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2af35a9178efbfe02b60220040c86429","sha1":"3d4f6b9b8c7f4a506cc6752bbb1ece3181f60458","sha256":"2146a5dcb6e0da17cd0f477f1a96b12ff75ba3e770b80e2b2dafbc8914c4089e","sha512":"5a03d8e70577f997bda9c508d91bb060b7d96dbbd7d1475e4e9e4882e26f11674c26dabf38342b78644dcc19df65e6098f2de268a3587d6aa4bed9c734e19425","ssdeep":"","tlshash":"8261176a32a29e51622f2e1e803ad4f33d641a52fd1015b6307358b0c31fc59ffb5d25","first_seen":"2024-11-26T22:14:07.224394Z","last_seen":"2026-07-23T13:35:16.593387Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1887,"timings":{"blocked":1607,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/i18n-BHUysqrf.js","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:00.479Z","timestamp":1784813580479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/i18n-BHUysqrf.js HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-eda6\"\r\nexpires: Fri, 24 Jul 2026 01:32:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojmqrQzoRJmjgPNcjdgLreujOnCJjTANCGxv%2FeNkQiUkeSzxzkYfftM8KTHXT5poU%2FG6nHFE8cunR0ykJ76GDZ5Ezslvc%2BN1gnZHnTpZiSA%2BVXJNPCEeMlDf4aZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dee0b6356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60838,"size_decoded":22001,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41432)","md5":"4e55b7dddb1235f5a46844b2424fa33e","sha1":"304d20c5939e71c2d3213c150cbf22d6fdbf4502","sha256":"008c399bde6d344279cb06908636ba5c2998f1df8edac0a3138e72ca20936df6","sha512":"f2369aca3afb4ace505fcfbde58e94bfce6f257da87ef835b2a8a9ec2b855028bfcea38d5f27299351032c62d067dce551560f986b098a5ec671b653960cc5d4","ssdeep":"768:yKQiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:47Uq0+/YjQ9vau7K8uVoV","tlshash":"bd53f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","first_seen":"2026-07-23T13:33:57.228224Z","last_seen":"2026-07-23T13:33:57.228224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/option/rules/getVideo","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.693Z","timestamp":1784813581693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"GET /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fx4VHtLpMQhvog1uUpXzy81MMpRg7bsVTW9UuL%2BD%2BcekaW%2Fhzc7EqOa7FP0WZAY7E7pNgdY5liwgo30PsqJHszWP1ieHWHjk9hw%2FMO0zYrV7UT0f9WVD3LzcWZ3Wd0yjs%2B3%2BtiNzaPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df96cf1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":950,"mime_type":"application/json","magic":"JSON text data","md5":"81ae7b078049a2219423ceba1954d734","sha1":"2cb328ea394c7763c33c127e3d5a03c2448b35d2","sha256":"3d08f73fd242a824c195d98c511c116d537c56670dccdcb6973f8e330d88bbf6","sha512":"098ba5c9515986f67bbec970e534f91f1d3d5270ae726eb215645bfbaf6c7337fe42aaa7c8c9b374740fbcbf22e4507122d44b6691f74f1c05447f9a2d6ef455","ssdeep":"","tlshash":"318004311c0cdc43740334cd4107474010d4305057300310cc5c5134c7041747441c54","first_seen":"2023-11-15T10:07:01Z","last_seen":"2026-07-23T13:33:57.229768Z","times_seen":113,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/way1-CEZuiD46.jpg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.707Z","timestamp":1784813581707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/way1-CEZuiD46.jpg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-2c806\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtYmjO9OWAS%2BO8kXMrITrVRS%2BGvmzcgvDYFICovftppQaefLQ6ercSNI3v7plHcO3o3Cykfidz8g4JrmTyOiSHk6P5%2FeYGx2vwS8SK91GlkJMshBPIUZtT3lTSvo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5aba956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182278,"size_decoded":160046,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3376, bps=206, PhotometricInterpretation=RGB, description=businessman using a laptop to check stock market data. Depicts TradingView financial market chart., manufacturer=SONY, model=ILCE-6600, orientation=upper-left, width=6000], progressive, precision 8, 3200x1800, components 3","md5":"6193c52771a417e943dc97b2282d1bb2","sha1":"09a6a0472953dfcaccd2b89b8271c5ac70fb46c1","sha256":"9aa23aaac30cc6e13669debcdda9e17aeb1aefcd4b7d7f1dde11c807a2037889","sha512":"b6d0b4250f47bbfaaa467b5683fbc71599071ea08680255f6b83bd22f9dcc4e650ea0fe5d8658796d7e1a282e99cabfcf34f67ed464de64440c26ca6c63620f4","ssdeep":"3072:TEJo2EJowFXL/FLIvnsAwju2VFght1E5C9M6vJmIkzquCkDnJOrfroQh6dQFJbWP:T/2/wbXZSBz1E5C9cICqfk74rToQhBJ6","tlshash":"8c04e1c89fe15cc3dbe67379915aba07a2144584a7ef419f3c4c62487fa7b80f898817","first_seen":"2026-02-24T15:47:27.731835Z","last_seen":"2026-07-23T13:33:57.230589Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_6-BrdJwosH.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.727Z","timestamp":1784813581727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_6-BrdJwosH.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-26d4\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BRgW4g7ZrwPM9EgBE0Y%2BvgANDDBABCHHf01eEStXcEtnK79h9Cp4ogSKPFT0amt3jI3pVbXT6IdTU1rqYkIsiR38OTUz6JDT2k6untr2UQ8b0b56eeUh%2BPHbDLP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5dbb956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9940,"size_decoded":10746,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4e6adb95ea32bce12b23d17e5c0bead","sha1":"00ced7819afc7267f587e68ad7dfe84c7eec7261","sha256":"b13acac1bd74d72c21facafcd3dbf6bb44dbb271b23a0df6a228eb28b7e337c9","sha512":"30f9dc0634ab618910888f5b34671d727e6e853facbee428b3e0177cc0dc3defe2f26dbaf96997e6bc351c241335da5f320d8f97f034269987cb2e99b4a1c838","ssdeep":"192:fS71Xz65HFwfkYKFafIGQA0GIQuuUa3b5hevzXLOU/8Ea4FM5OCZ:KNzUHFwlyafIGQAx7Ua3b5hevzX0EXaJ","tlshash":"2922a04ab28e49fdfc8a605c80b78d78764c2831f333e6110480f6a653941f756f3217","first_seen":"2024-12-26T23:29:40.06096Z","last_seen":"2026-07-23T13:41:50.64652Z","times_seen":97,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getUserCoin","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.744Z","timestamp":1784813581744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDQ%2FuP3DH0AL9DxeJjM5aN4o5RRSWTpezYauYi8A7yeLHZ4g5a8lwAAsImd4ZkT98urqajmQ1nq1Vi9fQ2pVTx1bRoS%2F1O%2FDsOjNnCFUCkJHTy45gczeD4Pmxart9aGBmY5y%2BHB7bwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0df5ec4fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":958,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getCoinContractList","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.619Z","timestamp":1784813582619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /api/common/getCoinContractList HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sARhUtl4ArkWQXXV9WYgcqasr4XKSXSH0LxD9%2FqE4j7ysdT9Ex3rxSE%2BGXPIgPx%2BXQkrp8yTu3ANCsae0Yj35hAuoYBSoolPAZ05tXjNJHKQjvQs61qBLPHjkFTqqVrlENckoTm5Uo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0dfb6d4da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/index/DJI.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.177Z","timestamp":1784813583177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/index/DJI.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 32216\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621811BC6A5B3937DE6D71\r\nAccept-Ranges: bytes\r\nETag: \"39D22552C069A87C70E92D882DD7AB66\"\r\nLast-Modified: Wed, 23 Oct 2024 13:55:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1591215290632198583\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OdIlUsBpqHxw6S2ILderZg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":32216,"size_decoded":32766,"mime_type":"image/png","magic":"PNG image data, 536 x 357, 8-bit/color RGB, non-interlaced","md5":"39d22552c069a87c70e92d882dd7ab66","sha1":"a69f67db1488fa26c190825726d8127aca828fec","sha256":"1d178a3544e6f536f7e4110182fda6b577b6337373054852ece30d0895a89093","sha512":"829083fbe42d384ef87b67b5d5a8eb95f3c996377ae16f4f8be300406814f913bc7e9233948674c416214daf4c7390bd3a63fa8a8902beab22a1d4797e0ebbbc","ssdeep":"768:+Fkg4ypeWcbDk9PQDG4SvoyjW2LKKKKKKKeuWSHq8Zo0i9A2G4v9Qk0Hdt5FyV4L:Ukg/kWWw9PQyrvGKKKKKKKKeuWSHJZiS","tlshash":"49e2e032f7851b5903b629ef5cf2e895085114ef84e9be18e63a4a36db01cd02532ff1","first_seen":"2026-02-24T15:47:27.710556Z","last_seen":"2026-07-23T13:33:57.233175Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2092,"timings":{"blocked":-1,"dns":26,"connect":263,"send":0,"wait":270,"receive":0,"ssl":1533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getUserCoin","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.691Z","timestamp":1784813581691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"POST /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPlq9eA9u%2BIk7bzjwmjEiOq6hI0lcqKyrH%2FlwI1jA5nf97xvGIrJXYPqZtqbYas%2B3H2KX%2B45kxR3mm1PMNQsywLenYJDXDA7x9JevCQCOTm5ElaGvQQnU6Bhw3IbjzSm4oIckEaXvxU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df96cf2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323321,"size_decoded":52687,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b8b022e038f681c273d90dbdc1fcf34a","sha1":"9f77000f345e20697bd5f87895de39d6ce165972","sha256":"c20be01db2f46f85ade25e3bb2ba8922ee1abfd568515cfabf2687f65a3f57c0","sha512":"438cc3ade75b0e1cfac1bebb949e6a1e634e9b6ca11d376136f49ba9b20a69aa2c640976ee2870be48787455e0c458ee22256f243d56a45e36b4100ea8976cb4","ssdeep":"3072:KGxngAZFRotAADsEzYqBHRoJkMJFMkw2xpyT8KfZlkHAwvtgJ4p3b0VZzs:DFRotAADsSBHRPMOlkHAw1gWAhs","tlshash":"4364c171cec891ca9831bcd65f87bee01e9a37c367ef9c8105896e015bc2b31d12579a","first_seen":"2026-07-23T13:33:57.235024Z","last_seen":"2026-07-23T13:33:57.235024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/swiper-5-D4Iqg0WN.webp","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.706Z","timestamp":1784813581706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/swiper-5-D4Iqg0WN.webp HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\netag: \"6a610568-6638\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qunOcTAjJhmbffN2YFuT7RFVgBLNm7KH5ZdfpfZlJ%2F6G76APteAVwBhaZCadj1SwycPyZ8e2OaXejHXodJvtvkiq4JguWZjAFc39xkaoN%2Btq71Z574Up6rSiSmJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1fb0df5aba856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26168,"size_decoded":26899,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 912x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"79ff2bb449bfd8b87fd5367c9cdead46","sha1":"75897ba946659d27b8edf2dc7d599740945706c8","sha256":"a2e12534aa405bc347f891682efdd0cce40ba3ca49d775f859a61ec2aaa24b66","sha512":"8f4b24677d9dee2de792c480c33a26d9606fbdbc6632d7a3e44c6940c18d21342c49eafeadcbfd40f13f434ca6280ea54f0b5d27906a0d87002fa60039072e94","ssdeep":"768:SBBYY/H4rlCc9ltGTeTdo0efiVJT0dwYUFY:SBBDH4rlCcHgW60AwwdwYwY","tlshash":"68c2e023ea71251be3b433d8d030ae7b1b615ed6db29e576b00c02a257eb4eb1c4c765","first_seen":"2026-02-24T15:47:27.72026Z","last_seen":"2026-07-23T13:33:57.236537Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Frame%208-QBBarmw8.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.718Z","timestamp":1784813581718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Frame%208-QBBarmw8.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-117e\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdzJoYhPn567cfiPe03FC36h3t5b0t4qD%2FSh8v%2FJeFNii13WhH9ncSpv7gMGqoWk4Fmm1De1UERt9wdZiX3Lz0ej1bS%2Bjt5BsByQx7FAYi3w8s6QM4VEvk4GDvrL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5cbb556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4478,"size_decoded":5275,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"e7cfd72af14d344bb50ac6a368b99779","sha1":"6d04bc54730a8609351237bafbb0bfc98a07e131","sha256":"180400a26cb69fe17d05af323409d39541eaa734be725363518ebdfb431b8164","sha512":"f981285edc92363ec2c515204f81363c61eb8c8b8bee5cae16b48d9a90866f64e7313813ba306a5d0a9d93b45dd9d7f62341667922f5a4b6d52202ed3573a4e4","ssdeep":"96:fSpM9j52pIOAY8e34ByvkJ8Z0LasASip3bJBK44pv6mb2:fSm94pIOAYgE9S744pO","tlshash":"27917d9dc1239d25cde6caeeafa46ccd7c8d7f009d25726880a5247526040ec4b3e68b","first_seen":"2024-12-26T23:29:40.08069Z","last_seen":"2026-07-23T13:41:50.705315Z","times_seen":100,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T13:32:59.996Z","timestamp":1784813579996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRpSUDXMBMCLdTBJuWo0DnsrskJUyTUWuqBY2xAtiQoy50CbHQ71LoBJCjc5rplxxieQkzr06GuxRs%2Bpy66%2FGiueUWu%2BNh0F7057BG6o%2BxwJG%2B0KNaZmZBZVIBO1\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1fb0deb2b4e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1764,"size_decoded":1527,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"161bf896dfb9bd29745d90d0cc23f02c","sha1":"7cbda704701074370e22d14018dfc0dbae466b9a","sha256":"76cf6427b3610e44f9f6ec4e43b0d00b5f0cdb3dfbb1261215fdd9bc459056ac","sha512":"c15cda2eab46bca64386dfe27a214a0bec6180086678080cb8005c52cfe8fdfb9273f0581c467a2d249a86980c3985a3669aee2004c6a2bf2a97906a3123c312","ssdeep":"","tlshash":"39313203a6b0a81c5270462dbdd0f4084f59d687d31a8a9975dd20bc8fd0fe5caf71ba","first_seen":"2026-07-23T13:33:57.238727Z","last_seen":"2026-07-23T13:33:57.238727Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/swiper-6-DC4Ip13J.jpg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.703Z","timestamp":1784813581703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/swiper-6-DC4Ip13J.jpg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-19767\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcBHZYb7zcyMliA3qmqVmFTlcUImLmdIQQ8VXcc0S7wfVHqL0nY3wQs2DaXLOYXkVZrS5i%2FOktZniDW2yt8Ojda9w9iH9q6mWI325cJnwPDaKdvfBcNO11McfBvb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5aba656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104295,"size_decoded":104336,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1200x800, components 3","md5":"12c61596e1d76f641f20730ccd100eb6","sha1":"252961f79340b1e08d76f2bbcf5a5fe26769d337","sha256":"1c74f207f0d0e0d6576479d0f9a927ce6bcb3269b87936d6b229973c1d0b00e3","sha512":"24675d12318992740db5efe642572a98a80d3e5c3ebfc7fa69b9b2891e657e27e4ec8f6fe9ce5a5386cd1c39d1704d600ae377dc54985aba23550b65a73e5673","ssdeep":"1536:QhOp9qblqUuj0HJsj+na8+oQbpth3Z34yz5agNKpJv4+hqyfOYPLle2g5BYPwue/:VI17pjH+oQLdZoy8R9FfjLlfu4tW+EjH","tlshash":"20a312d0dd87b40a670fada22bde33a3d600539d69c54b3f584a9c9daf451c44eec346","first_seen":"2026-02-24T15:47:27.738259Z","last_seen":"2026-07-23T13:33:57.240122Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_2-DlfMR8Iv.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.719Z","timestamp":1784813581719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_2-DlfMR8Iv.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-1c70\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeqsM4119109O2RxtzIkDi6WCzPYPkSIq%2Fayy4aBM0sNxVSH9gZ5Pt%2Bp9pA29pEa09S%2FRr9rbk%2B718g%2BMnpmNm4nI2uxXp7WMTPLK7SL7bc3Hg3MoWGKCUQqcrGt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5cbb456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7280,"size_decoded":8090,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"3bba6d7047f93b8079b6574966141522","sha1":"6315fa7577ca55f1ea3f1cbdbf1d8c92b88646ce","sha256":"45b87f2619cb785de2ea69042fbad87abecc7d73e6838f6e7e21bb7a4fc24dd9","sha512":"2460ada343603c0555e7015a28f8d72417166827be8e300a741f6557adc9e5aded4ef7d6294f234e777851afa3d39586a8bb61fe461727efda1a975b070b22f8","ssdeep":"96:fSo4ltvV8m5Zcw/IPgUW0Vc0BpNZJfqa6hnliuUxWNBgPe0pSipGDhreyCiK:fSo4rvqAZjiBzZJyaslNzNuPddkDhrV8","tlshash":"8ae1affd77d102087854606a154710309ad06f1beae4ffc689915b839a0b1fcad2e6a8","first_seen":"2025-02-12T08:38:06.871461Z","last_seen":"2026-07-23T13:41:50.645545Z","times_seen":99,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/BTC.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.187Z","timestamp":1784813583187,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/file/BTC.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810C390C33534592586\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Tue, 22 Oct 2024 11:43:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":3239,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-07-23T14:16:11.972509Z","times_seen":22575,"resource_available":false,"data":null}},"time_used":1608,"timings":{"blocked":1341,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0e2d66d5042cb4209959577d41ef083ee.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.188Z","timestamp":1784813583188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0e2d66d5042cb4209959577d41ef083ee.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2328\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6218108B904435345CA76F\r\nAccept-Ranges: bytes\r\nETag: \"039395059ED9863FC8286BC56081C394\"\r\nLast-Modified: Thu, 16 Oct 2025 13:57:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15515035727527945077\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: A5OVBZ7Zhj/IKGvFYIHDlA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2328,"size_decoded":2903,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3","md5":"039395059ed9863fc8286bc56081c394","sha1":"56fc82e43a04f2757b469d4fb0387b965b1e340f","sha256":"d927c675bcccf73bd88c9cd434aacbbbc3833c7d2b776171ca55ec2a3af7b271","sha512":"ea180ec10c4de7b6f935623b7939f0d86ebe488c12931adf625d4505c6edf62d0b16c60c30c8d3b94d65b8d55f5f809d31d49a4c9f9c52e9f67286a67b1c89ab","ssdeep":"","tlshash":"a9410c869b57b947db32113622d9e528230c6df5ed91d73e9940bf24b51acf240b30de","first_seen":"2026-02-24T15:47:27.74324Z","last_seen":"2026-07-23T13:33:57.242175Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1614,"timings":{"blocked":1344,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/main-CiMQjII5.js","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:00.475Z","timestamp":1784813580475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/main-CiMQjII5.js HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-60a95b\"\r\nexpires: Fri, 24 Jul 2026 01:32:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OMrpKdGKW2YyJpiyDW7MtC9z1JI8CDH8esIfSfs1AtDJUFQcSjjzgS2OQSX0j75URoMmByCSPFpRHSinKYnYNiZD4RwYushzIl8E%2FBhHcW7%2B3rpgMMnRUFqtPEa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dedfb6156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6334811,"size_decoded":2144396,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64957)","md5":"f77b0b594a774408904544de90e81675","sha1":"3f5c770cd6b9dc4d5e31606b18d7bf8a9c3d6d91","sha256":"f9383f958ad36395a2ad098157c7910e4f814f7268a20a76a5017558b8a6765b","sha512":"c036218e9d7ebfc5e39cb53b28258dd739171eb6a81e64a63a72d1a152b25c0fbf68e7ddeedfd6918c903c28f809d45ce4201e059f8e45f54e9c9d767b4abbf3","ssdeep":"24576:RkHXl90/CV6LSfYTbO8vCcwLSrSJxWN22FcmTQ88jDB3Oq:RkH190/S6LSfYTbO8vCcwLSrSJxWNTFm","tlshash":"9e459e4c7792b1940ae3929174e71502f174ad85f58680b4fdecc5be22e8e8de277b38","first_seen":"2026-07-23T13:33:57.243601Z","last_seen":"2026-07-23T13:33:57.243601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getAllSetting","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.665Z","timestamp":1784813581665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubfdxrnF%2FX2ioJ5sghxKEao%2FlvI6wruSvfVlSp5Ev40ZfISDCWoTvYGV%2BsFsu58i%2FUeMCvlWLAjZrUvt9UBlMboXoA2LzVjnUnHXhHO3r5Gdkci745POXL3wnDq6syyaFqxyST6XXHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df92ce3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53410,"size_decoded":12559,"mime_type":"application/json","magic":"JSON text data","md5":"6123ee984659d8071d80b111fe9f7c3e","sha1":"6b6ec172829e803d986e085aae60901935723a25","sha256":"d16614400efd5b9fe0cc2efe3d57176867b8b2cc7fe2cfaba49065946e62a63c","sha512":"0942399fd90e53ddb4e263ec46c06a5d18b370450f18595a4e2543badaf32f95100a3904d67124998a3a75c2ebc18657771e2c39893d8a7cd531afb552136ee9","ssdeep":"384:txzr4wsaUKz2PKoz4tpSMTVfbuTMcIv6y1/GlXBCEM7Jx3:t9EwJL6PKozG6yIXs7Jx3","tlshash":"3433440bf064e8bec6bd98d508672a6b25fdf8bbeed51894a0cd0f0c83e94718517716","first_seen":"2026-07-23T13:33:57.244816Z","last_seen":"2026-07-23T13:33:57.244816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/financial-plan-tips-Bed9q686.jpg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.712Z","timestamp":1784813581712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/financial-plan-tips-Bed9q686.jpg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-11b07\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JADnaAgZ8ie%2Fzsr%2FjbuU74d1qYjSPvozFTJjFEQ9aVUrh6baVbR1g749yIwL0sG%2BCC3QFqW6UQQPHtpx%2B2d7ZmYijLwCWqaFnks88V1CN9wGvGzq91nkPHsVxn4b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbae56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72455,"size_decoded":72995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 1000x664, components 3","md5":"ee76fb8388026d0bdbb29727b306ce74","sha1":"8c7c409947b0cfb9bfca4bcef6ea0bfcfebdf4cb","sha256":"b0f74d0651e0e3076e912e2e0cfd09f641c85db5fa2f41b67375e4f1616968eb","sha512":"987dfcdde1a1f8557cf3d251dec9f97dc5b963c2ae174c42f70a54d9205e022c0580219cd37071394cbe0b43f6f429dece838c442a93a66af1b12ef021890ed4","ssdeep":"1536:unJAJO5CSYefYwzJyHsldChlLRj2xTi7QfEnVR:yL5xpYwzJcIohhFXsfoR","tlshash":"fc63020177977db26ec26fb25cfca0ead8edf02c770ed414b12a468266d26845bf6601","first_seen":"2026-02-24T15:47:27.725173Z","last_seen":"2026-07-23T13:33:57.245975Z","times_seen":16,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/commodities/DXZ4.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.182Z","timestamp":1784813583182,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/commodities/DXZ4.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 774\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810CE63A83435BCA17E\r\nAccept-Ranges: bytes\r\nETag: \"EA69D2D6BD29413A1ADE8709477CD231\"\r\nLast-Modified: Wed, 23 Oct 2024 14:06:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13776577541300332205\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 6mnS1r0pQToa3ocJR3zSMQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":774,"size_decoded":1323,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"ea69d2d6bd29413a1ade8709477cd231","sha1":"38f15a6f227b38b3fbcaa9941f545cd06c7d37dc","sha256":"918fac27871170d5d1df52859460441ca35e1faa3051b28bbd5533cf3754e5cd","sha512":"e39029e2029720791062ff05ca6b08e460a2ef28c06cddb50ed5eb6b30414e0434907a3fc912d52cecdc5f40fc4ca7241423b989b010793187646c71e3bee31b","ssdeep":"","tlshash":"fc01bafc482c927ad0dd2650d87f15bc64a63d28cd50c44d902a4872fb1356fc6a64cb","first_seen":"2026-02-24T15:47:27.739711Z","last_seen":"2026-07-23T13:33:57.246624Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":-1,"dns":21,"connect":270,"send":0,"wait":273,"receive":0,"ssl":811},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/way4-BqO4w_jz.jpg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.709Z","timestamp":1784813581709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/way4-BqO4w_jz.jpg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-2ae61\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gO2J%2Fv9pvlegb04Qm9JKkz9HBJZL3%2BuSqM7CMlX%2BIy6eNrGqp3s%2FDw3%2FDhCESdChA%2BLFP8YNQGH9g7GOWWkIJb6vCnm7V%2Fy%2BBhUO%2B3uTl%2FSbiGZ2FX8QzyGitmP9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbab56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175713,"size_decoded":176477,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1180x448, components 3","md5":"6bba483b0edb442882f939ebd252869d","sha1":"71198557fe731397be5494416150fd3a90e50aad","sha256":"1f79d6232d92e6cf1b401d26b0bed50b5710fd44dca3ce706bd5cc7edfaed382","sha512":"7f8a521084a8aa5497bb185cee6be1ae40d98d74d538d00fd85cc9d04f771984dae0b476576952dd143b931cace7e26ff0bbf5bd1d963f579ee9bb06856efc71","ssdeep":"3072:6k+tRqk1AANWa/k58rOTg1rUb4PtZfQDdjKpzlT/x4HPX0f6BZcm6d:6k+zqyREas58rOk1Yb4PtZX5T/M06BZY","tlshash":"a80423e3423112dd9cbcd7ff2655e624cdd3708e218af90cb8bac16e9b010c9a5c365a","first_seen":"2026-02-24T15:47:27.735519Z","last_seen":"2026-07-23T13:33:57.247827Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_4-CZsCHZTt.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.723Z","timestamp":1784813581723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_4-CZsCHZTt.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-22f4\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0I2Cex0o1rGQJ3i8tu%2Bw1Cl2lBxTJ8abw6MLqUW9r9b597rb3D0%2FXR1x9Bo%2BA6YXiQDEjE3JOWpRr1KNmO%2FtxDZFnLapZdcQmmhnJxlpWfyh%2FHegk09OC5bxAp6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5cbb656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8948,"size_decoded":8621,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"5b3ee8976381978db00a5d83a5e8bb1d","sha1":"e4c03afd678536b2659f6115ce67e49bc6127f95","sha256":"d16314aa812455f4867fc9124af62e75ac962d48bebf068fb343e5b49c1f87c5","sha512":"2c4884ab65d9d3c62bd64ff25bd2ee709b6405f07e941e3c68ab28e82ff8fd91ba7a1c5a0b189599eda448e0a2f39b8b43a80878628b4afd95f9428e0e8e977c","ssdeep":"192:rknSAq+3Xq+g5TelZa+hXbDROtAir4cIPgi1QghQPkGadurVxKq:AnSAf3XfgBelZPN+DIYEQghOvrKq","tlshash":"40028f4599486e4165d6b294aceda00353a28fc0c782d8747cedcc291cf0bbfce86ad3","first_seen":"2024-12-26T23:29:40.048598Z","last_seen":"2026-07-23T13:41:50.681986Z","times_seen":98,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_8-8hE399Ma.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.730Z","timestamp":1784813581730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_8-8hE399Ma.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-1463\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qptjq%2Bl0aYVjCP3nWXoOXr2fVmvWVkomQlx7yzGCataMDhbE6d82Eu2GdRNlqhckiV5XcTOCTtqM%2FEp00h8QjOW2a96SHRecaMLtlNNFbj72yOMLnaNIaaHuMiWG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5ebbc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5219,"size_decoded":4807,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"6211d145652aa5683717095a2b8f3cb9","sha1":"e723a1eb0b976b950c7918554ca3e03b82517b2a","sha256":"4ffbb5844e062f2f9fc2a8d92fbb4e20eefda839538163f19cad9127a9882b5a","sha512":"c586421b8bab3f03423e22a99e4733fc6de0e8947fe5544cadd46d6f8cee89d2906504e34ed9a133a4e349be47d931ad936609fa19daa7e00b910b5d28d9a835","ssdeep":"96:rknmWq2iSs+x1Nfa9cNG0KGY+xqHZTHOHU+xLYTiuL+R83xrIN1KEVXDFQLsFnu8:rknK+3Xq+g5Tu0+ZuybZVXDFFtfQke9Q","tlshash":"b3b12a0abf406c114a9d66c067ee610767775bc086a4a560fce6cd175c306fdcd8e9c6","first_seen":"2024-12-26T23:29:40.093755Z","last_seen":"2026-07-23T13:41:50.660559Z","times_seen":100,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/option/rules/getVideo","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.746Z","timestamp":1784813581746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLWQxWeMrxkpfm6NoNGQGx2wwFXh%2BJrDEEi%2FVjXKmULeKJpGBez1LeM1VVEutFpIzyEncV98g0Imr0kV%2BdUOZKD2gjAYC98jUYCdVN63PK%2BwPdalx8tlXApZLFO9igtOTHgJTxPozN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0df5ec50a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":943,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i-invdn-com.investing.com/news/LYNXMPEBBR0PM_L.jpg","fqdn":"i-invdn-com.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"104.18.32.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.935Z","timestamp":1784813582935,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /news/LYNXMPEBBR0PM_L.jpg HTTP/1.1\r\nHost: i-invdn-com.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-27hhL5cxGDTFvOxKN9g10D' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=ybuMB4ViB1aamUz2Rq99cpJL6wLkXQauu.32VNdpHP0-1784813582.9543076-1.0.1.1-j57gq.CbtzSgW43W46x7wOSV52TNfn8J36.vSoNqFChKnu5ZfR9Mu7Q_pNItQ2ti_fBQCnIaKKNwWZcVdzl.kPAdswNKe72jMb_z9kmwwZsGGs33T96OsEN4jITwsLrvzQzBDpd6kmVxyVLbwVFh8w; HttpOnly; SameSite=None; Secure; Path=/; Domain=investing.com; Expires=Thu, 23 Jul 2026 14:03:02 GMT\r\npriority: u=5,i\r\ncontent-encoding: br\r\ncf-ray: a1fb0dfd7bb2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"a1fb0dfd7bb2783d\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-media.investing.com/news/moved_LYNXMPEM6L1XC_L.jpg","fqdn":"content-media.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.945Z","timestamp":1784813582945,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /news/moved_LYNXMPEM6L1XC_L.jpg HTTP/1.1\r\nHost: content-media.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-VXqArfxrJXaMMwyp4rbUEO' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=0gw2wnZJzi2UjQVuJ98mXDOavqqfrrFlWv3Jmc6SR1A-1784813582.9528477-1.0.1.1-X8Qa0vvoDqfdUH0TYihR7IeOEBRsnCiIiNbgFbsHf8HCpcMOv7JiGPkeVG5gr1dHtVgpt_CC2o0_NlzxEsJsqp6dEeP_zA7F4NBEIW8wKZ0yHu8eaUNAUaDk5I71lP2qLr8BLBS3X1cQZh51C_HYjQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=investing.com; Expires=Thu, 23 Jul 2026 14:03:02 GMT\r\npriority: u=5,i\r\ncontent-encoding: br\r\ncf-ray: a1fb0dfd7c5ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"a1fb0dfd7c5ac759\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/xauusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.186Z","timestamp":1784813583186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/forex/xauusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 10400\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6218108B9044353492A66F\r\nAccept-Ranges: bytes\r\nETag: \"11A4949C2E761F150AB2E2B8B96C193D\"\r\nLast-Modified: Sun, 03 Nov 2024 09:57:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3445713106352111013\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EaSUnC52HxUKsuK4uWwZPQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10400,"size_decoded":10949,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"11a4949c2e761f150ab2e2b8b96c193d","sha1":"6e362397eab6599a80038f5aa009cf977004bbcd","sha256":"bc47b3190ed87b215a2c76d2a1df3023c109fb46946d0e10b0ecf4ae43e7528f","sha512":"4326427cc21f85268a3801db0e6a58a5920a718482bab918943276c0547318be8957c77f4d4c4de27d9f82d3733e1a99de2f659355b02407473a4fb26ece91e6","ssdeep":"192:WSzOknE48Q9TZKzQi8roy3jGdB1s2ifp0tBEYcKUQ+kE77gN5XkUFD/dv5:5xnE48Q9kQgyK1s72DdUQU7gLFrdx","tlshash":"04229e4ae14240132bdca547f7d682436f731b005ceb028aace69c425d306bdde5b6f2","first_seen":"2024-12-26T23:29:40.006677Z","last_seen":"2026-07-23T13:35:16.547795Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1356,"timings":{"blocked":-1,"dns":17,"connect":267,"send":0,"wait":269,"receive":0,"ssl":803},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/gbpusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.192Z","timestamp":1784813583192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/forex/gbpusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 9691\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810AFAD5B303937967E\r\nAccept-Ranges: bytes\r\nETag: \"20414C504B084C8EAD8024A95F15AF6F\"\r\nLast-Modified: Sun, 03 Nov 2024 09:57:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13643768162021469341\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: IEFMUEsITI6tgCSpXxWvbw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9691,"size_decoded":10240,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"20414c504b084c8ead8024a95f15af6f","sha1":"18c67fb7c856d08b4768b34180520e96a229ba4b","sha256":"40c9314c5eba489ede26fcd0127cfb4994318c8e3b8a79df95a8135ed7599233","sha512":"ee3ba863699d3a09115e9a606322a6c174cc07513b1481c099d5cf8c2bbd017771b406cf7001a3ffd4318d686086c20e19e809b32f6d2eba8ad9904e57077cf7","ssdeep":"192:3S3eRfbNWEq7GPfH9lyLFHJY9+GWRzji2fPpIqbnGU3SlsNHMuoxj:iuFbkEq7GPfH9lyLvWPWRzLPpIqbn73Q","tlshash":"ea12b0f79925093300955cadcd9fc5a7b4242c9ed3036632512fae9be9d9fd10a310c9","first_seen":"2024-12-26T23:29:40.072911Z","last_seen":"2026-07-23T13:35:16.521999Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":1376,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/way2-2N1Of1z1.webp","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.710Z","timestamp":1784813581710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/way2-2N1Of1z1.webp HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\netag: \"6a610568-d1d6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbNobEakeAJdelgT9V6BMi9WS%2FiqWIpxXMbW1z3edJem9ZDK3QIh6olrAtD3g3mJCwLi8Kx4HEGgiz2puO4AyXVMEw9KNUdGWQacdhwS5rkWxhJwi2tVmlTgmJxN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1fb0df5bbac56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53718\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53718,"size_decoded":54447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1488x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5d9beac0bf31ce0ed9cc3a166d6440e6","sha1":"0c77e54fed72f39e4f7507c754ddd8aa26da6321","sha256":"4ef2f5b327bc80355564a3aed80fbb478c2f137cc7a751d9b1af6c2c81a5206e","sha512":"53c7a528d54029b44f5e7a5d4b29a0f69f6b2ff7da31d549206d2f709707d378ed531e07cd48c0da02d696c34c94b0d8f5020d2161b693bee319ebbfa5f7445f","ssdeep":"1536:TRuxRMNbVbE6QttaKWAh+swnEqPCSjVFhrqkeLOP/U0B7E:T6MBt4aGlIEq1FVqke4/UwE","tlshash":"d933027750b8fb9ee28a233b83f6a712cb5684efd72a4fa6503c894f4f19d400664d45","first_seen":"2026-02-24T15:47:27.754104Z","last_seen":"2026-07-23T13:33:57.254632Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/stock/MSFT.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.195Z","timestamp":1784813583195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/stock/MSFT.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 887\r\nConnection: keep-alive\r\nx-oss-request-id: 6A6218108B904435341EA86F\r\nAccept-Ranges: bytes\r\nETag: \"DB17C0C3ECD563DB56FC0520D5306AAF\"\r\nLast-Modified: Wed, 23 Oct 2024 13:59:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8207813421043285486\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2xfAw+zVY9tW/AUg1TBqrw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":887,"size_decoded":1435,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"db17c0c3ecd563db56fc0520d5306aaf","sha1":"38b787ae27515e3199c15586d6bdc59d69763802","sha256":"546d2ac1503165ce285b5efc4592532e0991580a1765b327338559344046acf9","sha512":"fa437f21c9867b43da1074319d59725d4b7af5fb035c7d1eda78556b2013d967dd4246141a3db600c302e110565a7ee63705247f94a7edd8c34716b649fdb418","ssdeep":"","tlshash":"181197b7612c4b64c2e0889f922c2b9df5f10f6d4534b4ce428194f737a60080087269","first_seen":"2024-12-26T23:29:40.09209Z","last_seen":"2026-07-23T13:35:16.590508Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1887,"timings":{"blocked":1612,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/nzdusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.197Z","timestamp":1784813583197,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/forex/nzdusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 10364\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810CE63A8343506A37E\r\nAccept-Ranges: bytes\r\nETag: \"B9CD102710DAFD0FED9857188FA69024\"\r\nLast-Modified: Sun, 03 Nov 2024 09:57:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14319424501580896202\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uc0QJxDa/Q/tmFcYj6aQJA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10364,"size_decoded":10914,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"b9cd102710dafd0fed9857188fa69024","sha1":"e7bd39888e5a79a3ac878096ad6da014e1ed48ec","sha256":"f7b7da73afb24b45535ab7bac1d71292e2be775af4f266f8f6b4cfbf08bb6ce9","sha512":"55f6cb56fdad64098e17ec8993090a9654c215c3d804ba5fa325162e90c7e3ffc8478a8d6ccdee57019f19ec24384a4b03f0ec0e5159389e8021532e5068b82f","ssdeep":"192:3S2Gm6UImswk/KEGpHEalH1c5gRgHNUDJ1Jw5uJd1XogzWHJQBB3HmN:i2G7USMpXx12reDJ4uJdV3zWGBB3I","tlshash":"3222d1e8a08989c743fc3095ff6f648115f25d21c941d4b9472115663ebb7dc3e866d3","first_seen":"2024-12-26T23:29:40.050152Z","last_seen":"2026-07-23T13:35:16.550161Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1907,"timings":{"blocked":1630,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/forex/audusd.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.198Z","timestamp":1784813583198,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/forex/audusd.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 11029\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810AFAD5B3039CF967E\r\nAccept-Ranges: bytes\r\nETag: \"03822F97CE596055C67A2BFB9BB42FA0\"\r\nLast-Modified: Sun, 03 Nov 2024 09:57:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2640049459324573997\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: A4Ivl85ZYFXGeiv7m7QvoA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11029,"size_decoded":11578,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"03822f97ce596055c67a2bfb9bb42fa0","sha1":"68c47e3570eca78723be82cfeca40fc787d032b3","sha256":"ba1f3fe34b95207e88741d534eb6173da2b46899f3a0145a669e3bf08b2fd806","sha512":"d25a696163493ac1ae4106c152481f695b46b2387c32bac00724262a06f19b5c789936bc6534829583115864d8414ae8e75238ca5fa88f77561868f2698a9691","ssdeep":"192:3S6SMSNQhSlfjpXRgZR7hn9upjnqiIwHHp3pGoHV1gSsso55SeUTbf+Fbc:i6RSeSlfV2ZglnawHJ48V1JsX7UTH","tlshash":"9b32aefa323c5cba0e4914edc69ae622d97a133dfc7251134eb0b27898e6c15750b48f","first_seen":"2024-12-26T23:29:40.051809Z","last_seen":"2026-07-23T13:35:16.501446Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1934,"timings":{"blocked":1652,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/kline","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.201Z","timestamp":1784813583201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:03 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCxO7brxabo9RU0BPQoeXNJYfF3sV9xJEkJ6dRvyht2OJEpngSj9Spq4YnUP9hOLceJOBVNeuB4%2FkG%2F2Q8hENZPY42lkrJq7xYDtT7UOm2Q1jXLMHhLvzwsu6l94YgAvZrUyd3OVEcU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0dff0dbca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":954,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-media.investing.com/news/moved_LYNXNPEL250US_L.jpg","fqdn":"content-media.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:37.202Z","timestamp":1784813617202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-media.investing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 17:24:39 GMT","end":"Thu, 08 Oct 2026 18:24:35 GMT"},"fingerprint":{"sha1":"3F:98:C3:53:D9:55:61:99:10:C0:18:C9:87:AF:04:D5:CC:91:C3:2D","sha256":"D3:BD:D7:B4:B7:2C:EC:CD:5D:0D:E1:EE:2B:CD:E6:20:40:FD:1A:48:64:D3:E2:CF:BB:03:E7:9D:E8:FE:67:AB"}}},"request":{"raw":"GET /news/moved_LYNXNPEL250US_L.jpg HTTP/1.1\r\nHost: content-media.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nCookie: __cf_bm=0gw2wnZJzi2UjQVuJ98mXDOavqqfrrFlWv3Jmc6SR1A-1784813582.9528477-1.0.1.1-X8Qa0vvoDqfdUH0TYihR7IeOEBRsnCiIiNbgFbsHf8HCpcMOv7JiGPkeVG5gr1dHtVgpt_CC2o0_NlzxEsJsqp6dEeP_zA7F4NBEIW8wKZ0yHu8eaUNAUaDk5I71lP2qLr8BLBS3X1cQZh51C_HYjQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 13:33:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67138\r\ncf-ray: a1fb0ed38c92c759-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"7c7a41e1bc16892ff52d24af6fcc06fa\"\r\nexpires: Thu, 23 Jul 2026 14:33:37 GMT\r\nlast-modified: Thu, 02 Jul 2026 21:17:21 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-guploader-uploadid: AKhXX7I0YNnnRNTLpCucMaFKXjh1jraxZdvwKjJgNqZzSvFfgwNwcWZy-27BO54YTZ3d-W-63K-oo4ni17tv\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok, orig_size=67138\r\nx-goog-stored-content-length: 67138\r\npriority: u=1,i\r\nx-goog-generation: 1783027041355666\r\nx-goog-hash: crc32c=7W6x4Q==, md5=fHpB4bwWiS/1LSSvb8wG+g==\r\nx-goog-meta-rackspace_hash: 7c7a41e1bc16892ff52d24af6fcc06fa\r\nx-goog-meta-rackspace_last_modified: 2025-03-06T18:37:52.404470\r\nx-goog-meta-rackspace_source_container: forexpros.com-container\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":67138,"size_decoded":68190,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 800x533, components 3","md5":"7c7a41e1bc16892ff52d24af6fcc06fa","sha1":"b58952df3c5f6db27e399eb1f20a9cfbdfb99e06","sha256":"95ed24c263da916c835556485489d228080d1fdf4158973f87a8cd162bd44e8a","sha512":"f15162518056ce4450f24e3fa5cc946f89b5ea56b3559dd1619425efa254d97b78ec716d8346e7eb96c405558f9adebbe5b1ed53ae67cb03709ab89dd8588ec8","ssdeep":"1536:Okqg2LXmhkwg65q0WFGOicdDLL+95HJMUHLNNTyR7:52qhkwgk4IOico5HJBHLNNTu7","tlshash":"b66302fef7120db3e428a13b222d622c4980836feb58797dd996c8f905cdc5ad367125","first_seen":"2026-07-23T13:33:57.258004Z","last_seen":"2026-07-23T13:33:57.258004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/option/rules/listPages?key=COIN_NEWS\u0026pageNum=1\u0026pageSize=8","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.689Z","timestamp":1784813581689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"POST /api/option/rules/listPages?key=COIN_NEWS\u0026pageNum=1\u0026pageSize=8 HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=us62bJOzpCDtV%2FafbwiAM6vJE6xTq6%2BpDKFTvdz3XimKxed8Y53xn3tXEFAyiAJ6w7RVk2Y7YfuD4XPEa46HZLxKzsRBhS%2B2wzpJo7D23zAK%2BJtu%2Be4sL2vlNmtxu1u%2FJs9bCpPzYQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df9ad00a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6144,"size_decoded":2550,"mime_type":"application/json","magic":"JSON text data","md5":"5650d5aa39f2cf477b0ac17d6481231f","sha1":"bc441ad4e2735894136b1895c35504f9e486e4a8","sha256":"696d321e2803861113e9e83882ecea1b1b911a0850ba8e151fc9f6a9ed580c62","sha512":"72e3ed27c6f99da91ea94e5ec4e51511aecaecd956550d857196364b8ba6c7c90f16d713a054d69d07a6f88d5567755309db5ee145e89149388478c914fef6af","ssdeep":"96:JKABxCjTqPdChEjTqWzlJ6jT/RGc2RljTqND8qGFwJjTqN62DiCDjTqGWSjTqUAP:JKAB0jelChEjeWzyjtGc2Rlje7GFejeC","tlshash":"22c1ef1622e4cd6e5ba864c320977dc4635eb30bd290cd78065aef1c9df9879163f287","first_seen":"2026-07-23T13:33:57.273498Z","last_seen":"2026-07-23T13:33:57.273498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oss.awsossli.com/echo2.03ffa4c33d9cc4a6bb61fb21213ff5c56.png","fqdn":"oss.awsossli.com","domain":"awsossli.com","tld":"com"},"ip":{"addr":"47.79.48.179","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.528Z","timestamp":1784813582528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss.awsossli.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 11 Apr 2026 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"71:F0:3D:51:80:B7:7B:99:68:45:2D:3D:5E:1A:F8:41:F2:96:98:79","sha256":"C9:88:B1:74:35:54:9D:C6:3E:CD:64:98:E8:C5:0F:5A:D0:0A:5E:44:DB:ED:2B:25:18:F6:A9:A2:82:2C:3D:C4"}}},"request":{"raw":"GET /echo2.03ffa4c33d9cc4a6bb61fb21213ff5c56.png HTTP/1.1\r\nHost: oss.awsossli.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 122694\r\nConnection: keep-alive\r\nx-oss-request-id: 6A62180F216B35323865A4B8\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST\r\nAccess-Control-Max-Age: 0\r\nAccept-Ranges: bytes\r\nETag: \"AD949EB0BFDC2B9D3A173FC38417021F\"\r\nLast-Modified: Sat, 04 Jul 2026 17:28:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15267324335944407402\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=3ffa4c33d9cc4a6bb61fb21213ff5c56.png\r\nCache-Control: no-cache\r\nContent-MD5: rZSesL/cK506Fz/DhBcCHw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":122694,"size_decoded":123365,"mime_type":"image/jpeg","magic":"PNG image data, 1876 x 1876, 8-bit/color RGBA, non-interlaced","md5":"ad949eb0bfdc2b9d3a173fc38417021f","sha1":"efa441f370a4fe760d6735f5e5944de1d3239e9a","sha256":"7894128e457400075e9726cadf06e43722379966dbce311b80e7e4b51ee83de9","sha512":"ac19638d2c742c7dd58db931f530637c4b355b31861eae3bb5f7e8b02181ec5b49075d566e6b45f6d7dfc96ec91aac423fb4765001ba7ab527958e57035fd42d","ssdeep":"3072:KXDdc0jL1YArUcsidJIv3bX/TpeN7x4DVQ:KXrjyAr1szbX/TQHmQ","tlshash":"73c34828d362943bb749492cf8562a1328906dbb3525ce0660cfb54f6383ff69e74de1","first_seen":"2026-07-08T15:00:07.789975Z","last_seen":"2026-07-23T13:33:57.282117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":0,"dns":103,"connect":172,"send":0,"wait":174,"receive":194,"ssl":522},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"oss.awsossli.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_3464rpqz.js?v=1769638669","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.530Z","timestamp":1784813582530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 12:14:39 GMT","end":"Wed, 09 Sep 2026 12:14:38 GMT"},"fingerprint":{"sha1":"87:B1:0B:09:14:03:BA:0D:13:3A:69:24:42:69:39:14:CE:15:CC:A9","sha256":"75:2E:E1:20:28:29:02:08:57:B1:91:A5:26:58:85:E5:28:6D:C4:30:D3:8E:6F:64:EA:CE:37:73:8C:B3:78:CE"}}},"request":{"raw":"GET /js/ai_service_diy_3464rpqz.js?v=1769638669 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 13:53:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a491073-71a\"\r\nexpires: Fri, 24 Jul 2026 01:32:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 40\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzJaxYwgE0AoteaoOOjETir188nJlbB3dlgvE8eVpcv7KyPm0XoiDEh0ixVLi1dVw1hjMWDvuaEBsUIMB34BK6NSY6wjGkF9u%2FusScwA5%2Fb3zDZXUclxzpfHhckYQfOcM%2Fds\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dfb1823568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1818,"size_decoded":1405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9d00b8541f0369213229467dcaf218cb","sha1":"ac379ecdefe225ff480a381ace80886b113634d8","sha256":"979ed606d695a5fa8dfe0c3975b04e43ffe1169f3d89a8244d8bcf961f815b2d","sha512":"a4f97a055d1dd9125fdb110e0d51b1a9dfc46938a8442e438b79d360af6c1b9099126127092f9245d21e61fb29ef9cfcdfaee7ae0fa93a186dc83d43d8a2c8a2","ssdeep":"","tlshash":"be318e515e99c576193232299b3ba218fb3117031501de033ebd57005f31d85a965ed5","first_seen":"2026-07-08T15:00:07.812072Z","last_seen":"2026-07-23T13:33:57.283525Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":16,"connect":23,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-media.investing.com/news/moved_LYNXMPEL3M14U_L.jpg","fqdn":"content-media.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.943Z","timestamp":1784813582943,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /news/moved_LYNXMPEL3M14U_L.jpg HTTP/1.1\r\nHost: content-media.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-WvgtR6X7NsmO5UzMOsquV8' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=6eEXQbE.Zld4qAcLvEF73XRn3D5Q5M4jl8rJQXakk_I-1784813582.9526167-1.0.1.1-mqNDCbXfKJx2ZPifjN_tlnZ7DPwuu7K2RJbyCy9LVHHe5bWjohr6X8iQ6E92s1qD8.L87aHYFxkvytZZYYlJ3jiVuriwQqmon5IhV1dhkdmqPlbP74NwifxqDfd_BMIyxglsr2LsMttok9k_S02i3w; HttpOnly; SameSite=None; Secure; Path=/; Domain=investing.com; Expires=Thu, 23 Jul 2026 14:03:02 GMT\r\npriority: u=5,i\r\ncontent-encoding: br\r\ncf-ray: a1fb0dfd7c57c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"a1fb0dfd7c57c759\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_12-C1QilreQ.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.739Z","timestamp":1784813581739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_12-C1QilreQ.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-1298\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ssja0nMtT1XGyDS3xj7kSez3vPKwU5degP%2BboMChY78Ayre6m%2BW3c5YaHq1gu9HjT5LxYpPF9FlLL1HrzpBfdGQusse8C%2FouTjYDET5UqkQY9iQLDvbW8XRH4nM7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5ebbd56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4760,"size_decoded":4850,"mime_type":"image/png","magic":"PNG image data, 300 x 87, 8-bit colormap, non-interlaced","md5":"96005bed58ee3407bddafa6c12707734","sha1":"c3220fb9384f290f2487bcca0acf38cb9dd90964","sha256":"53a0ff4b5ede57448da0e58c94ade19ef52a993015f4d06c556e5e1731c7edb8","sha512":"94d4d49ffaff9847318b6bdf7661dcabc080eee8fa4a033cb9fe7bccc2fa2235992f8cd3f42cb80e1e9d3520623d698183277577a7148739dbd2a3fd864e3eba","ssdeep":"96:z+5+dVokXu1S0zHAtRB73Hne4QDCvx65yOvOBkYK1+iL:z+5m+EoKNHne36x4yOkkJPL","tlshash":"bea16d969d8e8028e8e238b872d5f4edcd340134609bf20ab375ecb60cb50925d2fe42","first_seen":"2025-09-04T00:18:50.316456Z","last_seen":"2026-07-23T13:41:50.656676Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.amm1377win.com/ws/196f8769-3439-486c-93fa-3a8db2fd040e","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.083Z","timestamp":1784813583083,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"GET /ws/196f8769-3439-486c-93fa-3a8db2fd040e HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wincent.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: CGz8LghBA/RdYL1f//sfCA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Thu, 23 Jul 2026 13:33:06 GMT\r\nConnection: upgrade\r\nCF-RAY: a1fb0e121fcc0b51-OSL\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://wincent.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: U97xRjAm8oaIsxg1L1bB+6BIoAk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XR1VfV%2FRH6uMvb8rMsbGuZsEYHb1sL%2BJcNrH5Ydxz5VtmCVj7kuTflXbcGnjWyn%2BxVAehrypB8ZinyulNoi73Gpxxuc3V5V1WlUEckBIED5De5Vdqs2fgHizS55dqgloOO%2BPJZxASrQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1056\u0026min_rtt=1017\u0026rtt_var=355\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2868\u0026recv_bytes=1366\u0026delivery_rate=3148864\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=fa7b4ec89b03dfb4\u0026ts=598\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1079,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":6932,"timings":{"blocked":0,"dns":3165,"connect":3166,"send":0,"wait":593,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/main-DaOg-Se8.css","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:00.481Z","timestamp":1784813580481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/main-DaOg-Se8.css HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-5f430\"\r\nexpires: Fri, 24 Jul 2026 01:32:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rw1sImbIoLNuhTOSUfICso1bdZJPNA43pGwN67KsWipRjGUGS09g7qsJcmws9mJBy5parc3BlQLkjDo%2FE1GqKazcZ%2BWNLeSXdmRqflQ1grd%2Fwys%2FchyPnVaRtPZ3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dee0b6456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390192,"size_decoded":77509,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63338), with no line terminators","md5":"bb3fdf8528c707001c26cf6024eb0ece","sha1":"da13c8e3b23fd71f428fb01aeb83f63d345588e3","sha256":"c17a273c98e70583f9d41dd60cc7c1a9a0b98e1aeb7422de42159f77f236b17f","sha512":"8e3e5beca7a90a469babb00cdeef9d5bd3208956d84f864d131eaee24a70e708ae1d95bdabe2b6d2da95feae703436cf8115f2a9bf4ba06275fc77aa209aa85d","ssdeep":"6144:J+Qkq7sIZ348oyFsE+0GW688/zighNachtB3y7MVnKhXtWgGCXktOAL4iQADr6xi:o9IrFm","tlshash":"33842fbce24c00ea3b33d8a6c3b4775d6139f6b2ca911e95f95b901c9fc33e50595a28","first_seen":"2026-07-23T13:33:57.285262Z","last_seen":"2026-07-23T13:33:57.285262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Frame%204-qWkfDJjf.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.716Z","timestamp":1784813581716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Frame%204-qWkfDJjf.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-20dd\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkCIZW6vx%2BAweiM6MEqyL%2Fzs5jT18AmTGdWpAUGvrLFVEZPITX%2BtrjRskwB3JHKbVkdyfY58mxm8bTzthz0QznCzNW66iEn4U4Y0Tr2QyZrJpggEoKIaxClIBXLh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbb156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8413,"size_decoded":9219,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"264df1bab5915017aa44a0e0b8743667","sha1":"bd97c7bd5c839e29446cded395805af0a08f9b8e","sha256":"841a45a62324a18518fb30f38f1c097827d6b9585c35dbd9856f94755bb15e0e","sha512":"483aa21467a4ae27ed9f2ac5a7b705e8483c6926a2c43ce8d116943faab02f1ed9943fbbb72926edd5d1a32ecca8ef00acee2e7b4c37714730ef88ebbe53af2d","ssdeep":"192:caJgBbRcbRgI/EZ+ZsoUSRZnVHdtda+gv6ah2:xgBbwxcKVdNdtb66I2","tlshash":"7802af77d5c6848c122ce2a7eb287950f21448011175d26cf6d81ed7e1bb93be937b0b","first_seen":"2024-12-26T23:29:40.054476Z","last_seen":"2026-07-23T13:41:50.638182Z","times_seen":100,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_13-Dtre4Edb.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.741Z","timestamp":1784813581741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_13-Dtre4Edb.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-35c4\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zw1ReFN1A2TxWRwDw5tv4uP%2B0Kr8ks8bIXS4o%2B7PaI16DcxCaySgY4kNf5%2F%2F6QlcgGkksYcqNcXV7%2BJLmQ665cHA49L97xN%2FE%2B%2B1MIHkvfzqp6OYKZFKJePuPDAG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5ebc056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13764,"size_decoded":13443,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit/color RGBA, non-interlaced","md5":"2c6e67fc2e060d5be1cbe4adeee0101a","sha1":"47a256417b8b8c8f501e46f45201e4de3002f4f4","sha256":"1623e3d17213444597dfd17cf82b953938427487c41cebf5f8d24bcab6ff1045","sha512":"5926dca7f68517e2e11fb30da9538daaa83dd4f2c732443c077ea15717fc8a6dc1a5b86fd1d56f456eab45d9892f6c8a038d1f4f68e72128a08a3643eb27efff","ssdeep":"384:4RDnt7dGap/Krho5yWTenohUtYQZ+o96BJ:yDt7Hp1enMUtY29c","tlshash":"a252af2f7d000d622e049ba51dbf80d683b188d1c8d6b474e759dc12ba7e7bb15cee84","first_seen":"2025-09-04T00:18:50.331142Z","last_seen":"2026-07-23T13:41:50.708439Z","times_seen":82,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getCoinContractList","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.618Z","timestamp":1784813582618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"POST /api/common/getCoinContractList HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:03 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qm8O218upk7h%2Bj55ZO8kE2tcUmUA78r9tq8xh2peG3llMYWwaixmloN1rUFr4mY8%2Fy04932y8A2rM0WORV%2BmdwhjsFmvTM6aDkGodkJ647iR7jrbW9turOMWsAM5RiqC40QxX8KOnvM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dfcdd77a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97085,"size_decoded":7156,"mime_type":"application/json","magic":"JSON text data","md5":"48c2406a1c5677d15082dc9c82411924","sha1":"8b1b7ac229b5563d143f00ad88bcf8a141e25c04","sha256":"19ffd3022bb38b061e21918ae0dd268c5973de9334c0869846c2ed778cd7c37f","sha512":"f26dbe1ad811f9c6af21d445999138a224ffdc7bc954606dd338a265b90d0ffc5e5ac3551a91d4801e21385e715a4bf3fa0edb95cb2ecab9e00a194859b94642","ssdeep":"192:G/XhX1XlX2/XYXxXF/XtYXClXfXMXvXSXTXPXHfXhXoXMXfnHXxXWXR/Xif/XM/+:2nHLrKaBGxqDozS/","tlshash":"d5937a55563864fdc731e0d42f2b790292ec35dfadca4c2ac6de8d9c4ad0ab1670af06","first_seen":"2026-07-23T13:33:57.288989Z","last_seen":"2026-07-23T13:33:57.288989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/commodities/LCOZ4.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.191Z","timestamp":1784813583191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/commodities/LCOZ4.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1145\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810CE63A834357AA27E\r\nAccept-Ranges: bytes\r\nETag: \"B128A7F89A7C1669797B0B021273E73C\"\r\nLast-Modified: Wed, 23 Oct 2024 14:06:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18274301577377308405\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sSin+Jp8Fml5ewsCEnPnPA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1145,"size_decoded":1695,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"b128a7f89a7c1669797b0b021273e73c","sha1":"84c6b3bd328d4fa105b40b2f95776cf94ee5c3b4","sha256":"376469aa890085bfadf8a233c9fe0f8d94565d7a9941d72488e86129103fdc1d","sha512":"07da1c98faeb7a3b6a4f00eba263104411d751ed437ba321bcbe56c60cef951cfd449588467224340174958e7412b9052a2a1ce186ce66ca042b56904813a68b","ssdeep":"","tlshash":"702166f2d5881df9ce6b5d47af6090b9c39668b029837cc544b38c2978d164107d6b4b","first_seen":"2025-07-19T00:50:04.599867Z","last_seen":"2026-07-23T13:35:16.589556Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1630,"timings":{"blocked":1357,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/remixicon-BDfE_iBv.woff2?t=1760071648894","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.683Z","timestamp":1784813581683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/remixicon-BDfE_iBv.woff2?t=1760071648894 HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/assets/main-DaOg-Se8.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\netag: \"6a610568-2c814\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPnWK7NUXd0nG8K3qzwyeISnlTyvKvz4fIBTrXoYyJsGFcgl9Bf7UuofUQxW0aXwc1N84aC6oF2%2FZzsyP%2FYeYFfliux5Xwmf7zBIAQC%2BMrD9thOkOKtXcwZrLjgh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1fb0df58ba456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 182292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182292,"size_decoded":183030,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 182292, version 1.0","md5":"3e53d60e030e777e04b5b0cc5da9c3a8","sha1":"bfe4260877c5d467f8d442722ec2e3c9b6a1a56c","sha256":"56fb214017445c51f775255d0a9ca74c527097d97e647c5807b7c71f44f07088","sha512":"1232d9950b37bce0527121b0d6c79551c35c6e225d5afbc4f69e4a996a2a100afa143e57d1542d5fd8c4fe477e61572c4aec1b743af0ccb7d99d8806d20e36e2","ssdeep":"3072:2zLw8vepEBfDykrLS+uhmo1Bs8AH7w6Z9iNvt66U92+FR0VLXTsiXYV0g7K:2tveuBGki+uZDsPbZ9iZ69228LTVYVO","tlshash":"0f0412720768ea6c75fe2d341e749b1104ecd45908a04568850e9b4efaffb9c9b893f1","first_seen":"2025-10-10T16:28:44.194296Z","last_seen":"2026-07-23T13:33:57.291112Z","times_seen":252,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_3-CZAdRCrv.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.722Z","timestamp":1784813581722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_3-CZAdRCrv.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-1476\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Au38qt0SiZneWB3OT10tnvQm3ZtLzmmugTVo%2FpfXQ2FxvaJXpNp9fohkAGJII6jhd%2BVb%2F5QNbmN3X0IFKSgwl4QhWuqvOpUYKJ8musW2g7yIf7lBOVQ2uqnWjtc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5cbb756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5238,"size_decoded":5690,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"44e1a5b762465a0eb365f3f6fcc1d60d","sha1":"0acc5c63c3660a7c702ae6957c4b827574ea07f5","sha256":"186abff8e623d5232e4d46a8719269905148ee6b8dbeb47ee45878568fe6bf36","sha512":"f61cde643eb6a175d0e0e4435503a05d0d982e475ef31704096a9767e1bd2bd91e830e056f702626a919e06f6277119f4cbb4f282e9b0b014958ef79eaac93ae","ssdeep":"96:NknS2ia5BOmDq6Q0bXWl/dLdt/mTzv+zIkPJcFciGB:NknJBOmG+w9dt/2VEJicP","tlshash":"bdb18e6a8641ed4039cb8fc274e58847c371e048a3f0972b19ddda5e47378a8dd694ea","first_seen":"2024-12-26T23:29:40.099933Z","last_seen":"2026-07-23T13:41:50.659626Z","times_seen":100,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getCoinSecondList","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.751Z","timestamp":1784813581751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKUMz7IgHMldvlb8MqXg2yltngpFgit2loRDOBhGMbCWI%2FH1e9bH3ZBXNnsHuy%2FsNh8Y4ghO%2BPtVuWnlp49D%2F06wxD2jvv8dFpWwYFfTCyCkPiLXG1CDx9MiwRgyeMzvAymTpsp8alA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0df5fc52a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":944,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/index/SOX.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.184Z","timestamp":1784813583184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/index/SOX.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 38898\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810EE24003631E0F46B\r\nAccept-Ranges: bytes\r\nETag: \"78759BC509747D3128F147F16C8B6B7B\"\r\nLast-Modified: Wed, 23 Oct 2024 07:22:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9229898758857369903\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eHWbxQl0fTEo8UfxbItrew==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":38898,"size_decoded":39447,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x527, components 3","md5":"78759bc509747d3128f147f16c8b6b7b","sha1":"b88c8095fa69773402349a282076ed6668fdde1e","sha256":"c6d297d41fea72826f1af693e412fa5b306cf705640b802b5328db7afe1cbb2e","sha512":"4c6c3b2296112d429895feaf890ce23d151b6ce81fe8c739d206452c52a18785f26a0324c48edc9141a61268d6ed934f696a82af9b8534278c4bc9ce74b58a82","ssdeep":"384:W9A1l56SbkquaMT6////////uFV1wOyKMrh/w7+aTcq7PQuLrmSIynp0ex4L:W9A16SbOHFCa+agqbQuLrmdq0e6","tlshash":"58034d99d79f4b63d10685f0537548a6b3c423fd281fe687ca3d290ba606b414bfe0a7","first_seen":"2024-08-20T08:34:10.196738Z","last_seen":"2026-07-23T13:33:57.292161Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":18,"connect":268,"send":0,"wait":276,"receive":21,"ssl":806},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/common/getCoinSecondList","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.697Z","timestamp":1784813581697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"POST /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40%2B4iPQQABNhWlCA6zyedyPuqvPNHlQBsuL2WXcF%2FvZTTngpqCMjn76LlZv0RQzDlacK97OTFdns0a4x2PXM2E1HeM4mx88IZWAX0u9LTyOgAyuNMIuDCtMpY4y8Oyyif435BAkApOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df96cf3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97425,"size_decoded":10417,"mime_type":"application/json","magic":"JSON text data","md5":"49faf4cfab385ba9f521a6e002623700","sha1":"5141d95430d1c21f10f9b2a0c195507b31e5f339","sha256":"74d2efc7eda645bea90a660c63db271aad9796cca803a2fbbf64b5414bbda492","sha512":"85570447483a3e57cdb24caa52e43948c822720ac1235cad191d46ba1f0d463c5fa4868fe9291e27ace60bc89c56d797fbae7a337110cbd1bfa9a7ad8dcf35a0","ssdeep":"384:kUTD3mXOG9PwfF8WVqj1NdbuzOFdW72sYs:DOUVqRNdazOA2sYs","tlshash":"5a930d2eb624887c535044da59933f53928d256bfd894e7eccff8ec520f8b76620760a","first_seen":"2026-07-23T13:33:57.292775Z","last_seen":"2026-07-23T13:33:57.292775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/swiper-1-BU3_DKEQ.jpg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.705Z","timestamp":1784813581705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/swiper-1-BU3_DKEQ.jpg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-5ca4fd\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHwSrZzZtgaQokl5kdIuVGYIicLUNHLRGtpB%2BAjUAL%2FqJOcHxGhutEQItSEmSIcpIo57xcPKaRX0aJJG4FzqImyfn6OtrBBHlMxrAtvtjR1eD5%2BRjeobXDAD6A1J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5aba756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6071549,"size_decoded":6053994,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 5330x3553, components 3","md5":"55ce069233752a71ca22c3ba5898b722","sha1":"f1b480b587096fed0f7696307d7acc212b59ca26","sha256":"390ef3bda076f5002a09fa441c6a465808142b776cd583f9817f3f3800a6dc27","sha512":"90d12f70146f3d0e606bfec6e9a08f8c9f3a8a691b3a7de34ae377bd00ae2dec31eb8721f2d1d4da4aaf5db24409fe2cc5644b0e7b4abf8fd2a9a4d935c36693","ssdeep":"24576:YAuBvtpyXa1/8ZsyFI26C9+drUWfWfonI9CGpKD+hIBC:YAuBFMaaFH+drO2/KuBC","tlshash":"99253353bb4e4f48d26791b3de5d13298358e230cb799ec6dc2d2328899224d1dfac5b","first_seen":"2026-02-24T15:47:27.740585Z","last_seen":"2026-07-23T13:33:57.294478Z","times_seen":13,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Frame%202-c2RTuPRh.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.715Z","timestamp":1784813581715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Frame%202-c2RTuPRh.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-1904\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXQuHJazAdmm990L4xUEtA4MG%2BoiaG52swe%2BVArHUgYAUaeKl6xN1qhHsPsoXFd8vc%2BNf8zQz%2BxaIsvXgOg7LXlPZ8MIGQtv0SxC4dk5ihHwcNjmfh9AmD5KGc6g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbb056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6404,"size_decoded":7155,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5f6ce860b906f355bed0f55e2ae2a88","sha1":"044d4a88650ebbeb71b5ba01dae0993e64ea257d","sha256":"2e5a4148f2f24b69f934319ce6e397de373ccdb3744307d44a9ef747973b945b","sha512":"98b22901d2a1829c6d1953b0a3ff3306f939e2966c166f9971a3a29a95c27c844627c3edeabc4dc7148aeb0a47b8e685e7bcc9abf756f179e5dfe0f563a95fde","ssdeep":"192:MlfDJ/atKb4jNpdL9w9mjidVbFTC7E+XNS2:QM04jNXL9w9vdV6X02","tlshash":"8ed19ef7971026a7fa9855c615356cbacfd4a6034bc72608013a76053dd6728ff0ba86","first_seen":"2024-12-26T23:29:39.991003Z","last_seen":"2026-07-23T13:41:50.671954Z","times_seen":100,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Frame%207-DhyADEO1.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.717Z","timestamp":1784813581717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Frame%207-DhyADEO1.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-11df\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXvjgLCaUXoDg0v6JadL5Z6jKcTDJ%2FMCjvpU8MScNbHPxiU3jSILkyJqdIHYFrzgMYI0FfWe6So1GBCdAR2KfpytRl3xYx2ayg2jHJDuedg8ibJFPxXzQiU6jWMF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbb256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4575,"size_decoded":5352,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c32c604441f656c4eda637db0ce64fc3","sha1":"a936a84c35f34bec6296ccea1ca277ed492b3f37","sha256":"c1011c258b378ecd5b229f60bb4de768c1c1644d5e2acdca24076192b771d0f5","sha512":"552ee2eaef75d4aa9bc1cd49166d4aa8253dbe56488a325c4d670cc41f4dc88f424a2bc6ef42e190dbe651c90a9e0cdcc463fd6b6e778f17ec8a077ceeac0c75","ssdeep":"96:fSZLP23oemB7OTWDyKhsF40UKFEcHp4u9uXBIu++6at42k09B:fSJhxYEXsFLUKicKNR9++R4LE","tlshash":"09916c15efb1b3227f10ce36866a5811a71609fba54d20ae958d586c66143b37caf04b","first_seen":"2024-12-26T23:29:40.059828Z","last_seen":"2026-07-23T14:06:34.078335Z","times_seen":101,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_5-C71n8onc.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.725Z","timestamp":1784813581725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_5-C71n8onc.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-4fb4\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LpeNU1F47sTCF5gvhN5GHQJXC1BUJpVNNzvX5f%2F1ujF8%2FOUZ7nzqpd36oTQtbWXIYY22ei9eOrrw1Qp8K9MGEQhXYgwiBfjF%2Fj99VkQ7zQy0egvzVo4MJ8aK8N5G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5dbb856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20404,"size_decoded":20047,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"92aebd9e0e41071377fcaa664328e73b","sha1":"bca41b209ccb35004a1d926c4f5219e4529331c2","sha256":"df48430fe13782354a476bfa43769b893312990feec6ca44148f705d637d31ee","sha512":"28572d96317587904072f3ba65dc957fe5193e88121c213557038150b43fe06ebfd14eae7c33a5725ce1b05466de57b85eadef136f5d6b146ebe1cdbccd48694","ssdeep":"384:Anr3XfgBsR36w0j9hFNbDNe34iPtNPtshDwG4EMpUxgbRafnDCtDJbeDfibINeuX:Ar/v3oTJCDPzuRDDqCff+nATvqc","tlshash":"6e92d01db90bb4215e1f6150a0e9d23bb69356d024a0d571efcbcab1a8614fecb0f4d7","first_seen":"2024-12-26T23:29:40.10144Z","last_seen":"2026-07-23T13:41:50.720774Z","times_seen":98,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oss.awsossli.com/echo2.03ffa4c33d9cc4a6bb61fb21213ff5c56.png","fqdn":"oss.awsossli.com","domain":"awsossli.com","tld":"com"},"ip":{"addr":"47.79.48.179","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.525Z","timestamp":1784813582525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss.awsossli.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 11 Apr 2026 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"71:F0:3D:51:80:B7:7B:99:68:45:2D:3D:5E:1A:F8:41:F2:96:98:79","sha256":"C9:88:B1:74:35:54:9D:C6:3E:CD:64:98:E8:C5:0F:5A:D0:0A:5E:44:DB:ED:2B:25:18:F6:A9:A2:82:2C:3D:C4"}}},"request":{"raw":"GET /echo2.03ffa4c33d9cc4a6bb61fb21213ff5c56.png HTTP/1.1\r\nHost: oss.awsossli.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 122694\r\nConnection: keep-alive\r\nx-oss-request-id: 6A62180FCAC95C3633D37565\r\nAccept-Ranges: bytes\r\nETag: \"AD949EB0BFDC2B9D3A173FC38417021F\"\r\nLast-Modified: Sat, 04 Jul 2026 17:28:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15267324335944407402\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=3ffa4c33d9cc4a6bb61fb21213ff5c56.png\r\nCache-Control: no-cache\r\nContent-MD5: rZSesL/cK506Fz/DhBcCHw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":122694,"size_decoded":123260,"mime_type":"image/png","magic":"PNG image data, 1876 x 1876, 8-bit/color RGBA, non-interlaced","md5":"ad949eb0bfdc2b9d3a173fc38417021f","sha1":"efa441f370a4fe760d6735f5e5944de1d3239e9a","sha256":"7894128e457400075e9726cadf06e43722379966dbce311b80e7e4b51ee83de9","sha512":"ac19638d2c742c7dd58db931f530637c4b355b31861eae3bb5f7e8b02181ec5b49075d566e6b45f6d7dfc96ec91aac423fb4765001ba7ab527958e57035fd42d","ssdeep":"3072:KXDdc0jL1YArUcsidJIv3bX/TpeN7x4DVQ:KXrjyAr1szbX/TQHmQ","tlshash":"73c34828d362943bb749492cf8562a1328906dbb3525ce0660cfb54f6383ff69e74de1","first_seen":"2026-07-08T15:00:07.789975Z","last_seen":"2026-07-23T13:33:57.282117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":0,"dns":105,"connect":174,"send":0,"wait":179,"receive":350,"ssl":525},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"oss.awsossli.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1784813582610","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.614Z","timestamp":1784813582614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 12:14:39 GMT","end":"Wed, 09 Sep 2026 12:14:38 GMT"},"fingerprint":{"sha1":"87:B1:0B:09:14:03:BA:0D:13:3A:69:24:42:69:39:14:CE:15:CC:A9","sha256":"75:2E:E1:20:28:29:02:08:57:B1:91:A5:26:58:85:E5:28:6D:C4:30:D3:8E:6F:64:EA:CE:37:73:8C:B3:78:CE"}}},"request":{"raw":"GET /js/ai_service_core.js?v=1784813582610 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Nov 2025 06:22:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690d9033-44d2\"\r\nexpires: Fri, 24 Jul 2026 01:33:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMOMEsgPZ7gkJnUl6TJl%2BvBrBlpSyTCIQFDlDPvTijAnvocqHcDPSa3mhBH7ZNISWJ8%2F6E2D8CyaWuXqYBcmr4LAXIWYf1zm6R3IHSYIJMDTm4jOoYNYLjIRUcvoJdlXhfPH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dfb5826568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17618,"size_decoded":5264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (496)","md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-07-23T14:09:33.243526Z","times_seen":246,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/kline","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.189Z","timestamp":1784813583189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"symbol\":\"IXIC\",\"interval\":\"ONE_MIN\",\"limit\":3000,\"market\":\"renew\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:03 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2B2Tv4PTS24bAo6%2Byu%2F9NYCQOVCe35K6CVuVy3ThqKCuY5%2BvTaqwjluP04RNLlLihmGAGHIS7uTHMZoDDFKimZJjbn4tnitl%2Bhj%2F9xZS7fB8GUiJsXfYcspTQsSOmwFpyWRiLL0Psx4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0e004df2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27382,"size_decoded":8247,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c566d0f9999d9746327b5054eda2887","sha1":"fecc0bb93cfb1e371535d48330550d53da6019b5","sha256":"574792c969a30eba469992b38ef34f92cb732326505164efcbfed8a050857d50","sha512":"63446a01254a3569d9b74bce868b8d7da6776175edd09328f15e530d11f77d8977d6f339bec16d0b8ae6ef1048d6d4e551751bb75dc59f9d480a534e392c2d68","ssdeep":"384:+jsQaHQBxgdiOfaiKaUVB36YmBdLfLf3SENLsvXrGMMLrn:NIxgdPaiKaqBKYmBdXqyLsv61n","tlshash":"b6c295725e86e0d5f4387c829fc7bfa29e6733c796edcd81858a69490644ef09103bd2","first_seen":"2026-07-23T13:33:57.299452Z","last_seen":"2026-07-23T13:33:57.299452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Frame%201-CUL4cChQ.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.713Z","timestamp":1784813581713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Frame%201-CUL4cChQ.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-129c\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbpCaiLBIRuNPCLRPoCCHNkARYAyd1xosQVZhnAC%2Bnz1DC1BPlQPAT9EMShLOHV1%2B7TUoaCBADZDSuRiogYzmzj%2BFBkdAq8Pnfik7TpWaHgAThvqV6HMyNmQ0HLZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbaf56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":4859,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"8d212c8ea1591dfa2ba2794f71335ad5","sha1":"d4a46b85989a0fc68543d47374d7fb23b9533649","sha256":"db3891a7c41e37fcb3a5e36143a9c032486bdb2fa3baf924407a47b6a302e276","sha512":"ff704746c4dfe41083ec85ae9f9b807d3dc784b4055bd2ec149c4f8846966b55ee358218746f767e28c7778cdeadab955f976f4bc3c1e022320c7b0df88e34af","ssdeep":"96:Zj/zFb6cLBHNRnCWjwKWsEUW18YYbAcUsFXk8ZpRw:N4cLBtVCr9kAcpFDvy","tlshash":"74a18d25b470107e48e2d366dfae5cc200c4401e4c662fabd28a81bce28cb996473037","first_seen":"2024-12-26T23:29:40.085743Z","last_seen":"2026-07-23T14:06:34.006872Z","times_seen":136,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-media.investing.com/news/LYNXMPEB38039_L.jpg","fqdn":"content-media.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.939Z","timestamp":1784813582939,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /news/LYNXMPEB38039_L.jpg HTTP/1.1\r\nHost: content-media.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-4EP6AFShUBsk4rQAsRkKZw' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=rU_9js_qmL4KgHV0DZ_QP7G6xhILGgQmQ4AVRnKHGIw-1784813582.952329-1.0.1.1-GcFbPxgqoNF3aZBMk.AF3Ow.XZGT.qvwhg8cae54haFOER2_oE3OqbBABLBsEtMKzTr92YdOCEYC_xmBORM6EkG9CDgLpynQD8i6RFLJcCbFYV.z6KH3IEHTNkS0R1vcVxuMUFuFpUs9TM7RXjz8SQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=investing.com; Expires=Thu, 23 Jul 2026 14:03:02 GMT\r\npriority: u=4,i\r\ncontent-encoding: br\r\ncf-ray: a1fb0dfd7c56c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"a1fb0dfd7c56c759\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/assets/style/css/chatStyle.css?v=1784813582610","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.229Z","timestamp":1784813583229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 12:14:39 GMT","end":"Wed, 09 Sep 2026 12:14:38 GMT"},"fingerprint":{"sha1":"87:B1:0B:09:14:03:BA:0D:13:3A:69:24:42:69:39:14:CE:15:CC:A9","sha256":"75:2E:E1:20:28:29:02:08:57:B1:91:A5:26:58:85:E5:28:6D:C4:30:D3:8E:6F:64:EA:CE:37:73:8C:B3:78:CE"}}},"request":{"raw":"GET /assets/style/css/chatStyle.css?v=1784813582610 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Oct 2025 16:46:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ffa1e0-b303\"\r\nexpires: Fri, 24 Jul 2026 01:33:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nh%2BKXiOg0ThfsDS1JycqtJLHGtCL3DkouyT3uOf0O3zHHGlax7CnnQbOpPQVwXDmCJ1mfW4iHBoF9B6Oh9C6iiN%2F0N9%2F5WM6Cy7oXpAbHg7%2F8xCceEh%2F1l6hYw2oDtAZqUQn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dff385e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45827,"size_decoded":11030,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1414), with CRLF line terminators","md5":"7f04d716a07903513dd26bdc041cded9","sha1":"87cc4821c93b3691c2cc6ed6c07504f9c5030d5d","sha256":"eca5ab3a8577e84adaf245950a20cb525d5c762c14576671dbcdfc9a46de476d","sha512":"f4a86fb88cfef3906b7debb45e8d4d02a58f4afbb14ff8479e630c3f8c84f97be7d3996d3e399f29498f31066c28fb7a63d8a83e00bc151686e434bf796cd0a5","ssdeep":"768:b8hjh3T4m4G4/4y738BY8+kJYcJHJlxGSndLcR4xhQ14YYi631N8VNi3rdwLcKda:Izr9l","tlshash":"b423433ceb65218da123b4a9bff16be5af514013df0b06a5b5f17a38c2504bd39712d8","first_seen":"2025-11-30T14:17:39.779365Z","last_seen":"2026-07-23T14:09:33.210907Z","times_seen":245,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/vendor-CJPh82NI.js","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:00.477Z","timestamp":1784813580477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/vendor-CJPh82NI.js HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-19de0\"\r\nexpires: Fri, 24 Jul 2026 01:32:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiLIcP2%2BXkddP%2B4hBZLLdPP53dhu7oexFWVDRHtZP1NiUFu%2BvUMHO0jdMMg4Mktgu%2BrGd9QrTBIdaUcI%2F1%2FFs%2FCjHw1%2BeUUkmAGsGiiBllqP2E0Oa8RfriGVhJ7H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0dedfb6256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105952,"size_decoded":45521,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33655)","md5":"6e6c2618ada2a129ca6f7fb2f8a16539","sha1":"b3854e9c4af9c1282edfc773153d22a5adb61699","sha256":"962cb718c9812c8a5265ab9d4f916bf0ec9c4d53452c2a3fbbd155499d3f6ce4","sha512":"d94fb265bebf67948a7cf1d4cc468c9437542dca2c282c7a671dfb55236ade31b4de6a185a6f0c6e08efdd3e3c8236bea2bfdb7b994411cc7163cbd875ade358","ssdeep":"1536:nyp4FfPoBsIc+vsDknB6t7HfujjVd/daxlKXs3rlzOiGzWZsQNuqcL:yCqBsIBB69HfujjP10lKc3Zz1s89e","tlshash":"efa308e93282b06253ea19e700774015f33a1949380ed8d4f16daddb3d7744a91fbe6e","first_seen":"2026-07-23T13:33:57.302003Z","last_seen":"2026-07-23T13:33:57.302003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/swiper-4-djHlPW5_.avif","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.701Z","timestamp":1784813581701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/swiper-4-djHlPW5_.avif HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\netag: \"6a610568-1bf02\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nmhpa%2FhmMzIKXPGUAnu%2Ft6cfzbgExIehPOaoBP7t3KYOfaPGXshm3KDEMmGj5vXknoJvMabkItlghmULC1K5ZSqa9nakTC3zg5PAnfwAM8poHJM5YGqyGj8JQQde\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1fb0df5aba556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114434\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114434,"size_decoded":115167,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c59398008fa22db306ea6170f14c5cb4","sha1":"3b76b475592a69b742315f58e5f8dfb00fadc8e7","sha256":"996f00cc4ab20684372b57d026d0fbe68fc8c0c87a2dbe8c45fca1d97a9f023b","sha512":"98fd727bfae1d7d7a5283c2031afb07eb62abda8429c4d21d4a6e8aa4ee4a40029ec2e756f1b4d7ee5a4371754eb40e0cc25a4a0061decb09073e03d71290e84","ssdeep":"3072:r976GX6ewLjLUK2N1fwygNHC5mcL0AyIBhB7IG9Sb:x+GX6eiLUzLfSZL2yq7IGs","tlshash":"2cb3138c9a65ec17ea0b23789ab0cd41d2a6197277821383c903fbf71b5bf5b7550e42","first_seen":"2026-02-24T15:47:27.715022Z","last_seen":"2026-07-23T13:33:57.303135Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/way3-CX-cVDLC.jpeg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.708Z","timestamp":1784813581708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/way3-CX-cVDLC.jpeg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-40b4\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldmFrKevso1PEPqfx6at2hXNmFrQb4KNSIU8xNntPB%2BnuEZY%2F%2BASCI%2BfuRdVL2f4ABxQBPzVl06RYZ9DorBMgYwqRDV7Zgl0eVxaLnh9h0fft1WGC2ECjRhrp9HC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5abaa56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16564,"size_decoded":17347,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"7e840bb94cfb7a8ab27c994f0493a960","sha1":"c88aac9fd63d388db03cb46bef6bdff765592016","sha256":"c8e1f1c34660fef814530b243cd45a1c90654f8ae986ede4921396d5dbbe1d25","sha512":"289bc1f51e2a13ca46be522a841603c7cb148c23e592fcc53cbda173375a10deb014bad4b70239068665004f4d931fb0152dea4132741eb57e01db45bbd9ef25","ssdeep":"384:136G5AVDRoppQA/H11bOgIqE3waPgXksU9pPQKY5wS:1nAV2pp17BaOM7QKY5T","tlshash":"a572c0b45f344577c319e37846eeba51f12ee502ed15f35925ca7cc10b12bd9230e64a","first_seen":"2026-02-24T15:47:27.72436Z","last_seen":"2026-07-23T13:33:57.303741Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/financial-ipad-D0XGxufT.jpg","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.711Z","timestamp":1784813581711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/financial-ipad-D0XGxufT.jpg HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-151c5\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3rnYWw5jBR6qAcwlJc%2BC8IDgT2XN3ZxUTE%2FkXTCRA3si5I7gkVcLJb%2BT0PFxhFUrGlTHHerzPlQ%2F%2BQ8Xoik3LUnIuOr3pnKX5fQwJ6p87j1AgN27WVHXoO9Okh3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5bbad56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86469,"size_decoded":84462,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, software=Adobe Photoshop CS5 Macintosh], baseline, precision 8, 750x430, components 3","md5":"a4798e0846fde736e0b72acbe54b9725","sha1":"9c370313cf892200e6a863d51c2d01b960794cd1","sha256":"5230761d5e49131dafa7226fef568e5b10949177dec0e24bc0993bd53081f2b6","sha512":"e46065974b92d56da7d7ac9c32dd18e63ba8d08c50db89f9c98bc4a53653715ebd078403d8c00f92073359c14467d78d893312b3fa03c99ac8c41bc4aed0ddad","ssdeep":"1536:HdqQ+EYxoUXm3rS6PTYMRyhx8rkcF1S/ivY0hPV5ZB+IOYgCRa7r:0Q+E8HXmbSgTYXqS/shdztOYIr","tlshash":"3f83020a7751df13a5acd964f640d0eb4f3b64a927c6268a33bf9d5333a63a00c1dca4","first_seen":"2026-02-24T15:47:27.708871Z","last_seen":"2026-07-23T13:33:57.304367Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/assets/Low_10-oM9rJNnh.png","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.737Z","timestamp":1784813581737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /assets/Low_10-oM9rJNnh.png HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Jul 2026 18:01:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a610568-1e85\"\r\nexpires: Sat, 22 Aug 2026 13:32:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6VM9xEeeDH7N%2FfBfcPsDNRNurHVYWBECAN7vaZE9v%2BG%2FxpvBwfRJzA7kn0XJHD8XtwtNUEGgULKLW1D9erkBPaoTz8bo4kne6B0UpiI66UmA6GYglaAGkUDPubx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1fb0df5ebbe56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7813,"size_decoded":8581,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"ee91dd1f10c738a951cdd6d6f56c6d2a","sha1":"0f18b1339f62b322f0ca87bba04d7274d9cd6327","sha256":"66bca87cc8e292cc6a136f92fc1cf68f613195bc9b393aa90de3688565521bc7","sha512":"f6c643c252ea556ee6eeea30c1fec6bcb34682601d0dc99435acfd70ef1e48987c5b01a83d327343ba59a0f4ebcd5a49d3cd3b61db9a0c54faaaddc8c9a493e1","ssdeep":"192:fStX5dARBEEYxJg1L4f5aZzsPhY9706OTHEL:K5LEEEYxi1Uf6IPhko8L","tlshash":"7ef1bf40648a2e63661e7d48c2e0c5b557b655cf5338c35bad3210fd15e6281ee39ca7","first_seen":"2025-02-12T08:38:06.881528Z","last_seen":"2026-07-23T13:41:50.642161Z","times_seen":99,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.amm1377win.com/api/option/rules/listPages?key=COIN_NEWS\u0026pageNum=1\u0026pageSize=8","fqdn":"webapi.amm1377win.com","domain":"amm1377win.com","tld":"com"},"ip":{"addr":"172.67.171.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.743Z","timestamp":1784813581743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amm1377win.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:51:10 GMT","end":"Fri, 02 Oct 2026 12:49:48 GMT"},"fingerprint":{"sha1":"7C:E5:9E:37:CB:23:7E:A8:D3:C2:11:52:9B:87:27:82:80:28:5D:32","sha256":"C3:46:28:3A:05:FB:C5:8E:8A:54:F1:78:C2:28:5C:01:AC:D7:29:84:BA:35:5B:AF:01:EE:51:07:FA:43:CA:76"}}},"request":{"raw":"OPTIONS /api/option/rules/listPages?key=COIN_NEWS\u0026pageNum=1\u0026pageSize=8 HTTP/1.1\r\nHost: webapi.amm1377win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://wincent.cc/\r\nOrigin: https://wincent.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://wincent.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRdAm8Xu7tUEPpPssRn7PViS%2BppesLnRB9nsGlQKBSJ1hH4FU1y4lNOyJAoyQG2JISpqnvf3JhoaLFly56P%2Ft8UZGKSihv3UfsF2eKQ50hr7MOkhKWQCB%2B2qURcoDmdrH4Mgw4baE4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1fb0df5ec4ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-media.investing.com/news/moved_LYNXMPEK4Q0CQ_L.jpg","fqdn":"content-media.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"172.64.155.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.931Z","timestamp":1784813582931,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /news/moved_LYNXMPEK4Q0CQ_L.jpg HTTP/1.1\r\nHost: content-media.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-B0EzqSnYuVQ4KSDCXiGDL9' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=rN2xZDu1nGW1ihW2av6uAqkbCvldrjeByGZSyA4ctY4-1784813582.9521084-1.0.1.1-6YJPEwCoF.nVTBpjQxMkX1mZYfdlpQy1ShSK.US8vXbjK8_.P4w3zEfmlQZjh2sWfp_yOxk4Z_kdHJLPatxY4cXkaWA0KCM7rKal.8Pn36rI1yK6tmBtBvjKIkKIGN0rezrv7AhrkGUeFYHi7_LAEg; HttpOnly; SameSite=None; Secure; Path=/; Domain=investing.com; Expires=Thu, 23 Jul 2026 14:03:02 GMT\r\npriority: u=5,i\r\ncontent-encoding: br\r\ncf-ray: a1fb0dfd7c53c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"a1fb0dfd7c53c759\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i-invdn-com.investing.com/news/LYNXNPEBAG0BO_L.jpg","fqdn":"i-invdn-com.investing.com","domain":"investing.com","tld":"com"},"ip":{"addr":"104.18.32.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:02.941Z","timestamp":1784813582941,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /news/LYNXNPEBAG0BO_L.jpg HTTP/1.1\r\nHost: i-invdn-com.investing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Thu, 23 Jul 2026 13:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-VrsFb7cfijg88HPzXbiiQ1' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=v5cXzha3.ZwsqlDSXfpCD9duSCvZBFaQmmj7KFlOST4-1784813582.9547038-1.0.1.1-bwanv32.7w5U34AUTS0BldBm_2yTZ8eopclvQjSi6t3.GuyqgIvzuC05iz1O31mSoLaEx3TSAtjiIfdZatMU.tzpvc7Ah2dD._XKLQQJnaghHu1MsLZz3X4BT2_WiJjms1mksOUzSasv.57TiIMirQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=investing.com; Expires=Thu, 23 Jul 2026 14:03:02 GMT\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9KxpMG2UZ5jgtz8XgbA1mjeLhIRA.N2RXeiuIi3bn8Y-1784813582.9547038-1.0.1.1-cobuwCjBPgszMZqae4RS5ri5RXAjUYjElbia1nqgT6AyQSjFLIek.hODQqEDaTsCr7kUVLG02NTvnlSj2l37SwzDsv9wZjRUcp7143tJ3zvKv7qgmCm66F3Fivu3zxNB_tUcKB6zBtGcAQSIYiJmhkSIfqFCHUDk3YWHqNeZfYguXeJ_hY9_VU1v.LNhYPft\"}]}\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9KxpMG2UZ5jgtz8XgbA1mjeLhIRA.N2RXeiuIi3bn8Y-1784813582.9547038-1.0.1.1-cobuwCjBPgszMZqae4RS5ri5RXAjUYjElbia1nqgT6AyQSjFLIek.hODQqEDaTsCr7kUVLG02NTvnlSj2l37SwzDsv9wZjRUcp7143tJ3zvKv7qgmCm66F3Fivu3zxNB_tUcKB6zBtGcAQSIYiJmhkSIfqFCHUDk3YWHqNeZfYguXeJ_hY9_VU1v.LNhYPft; report-to cf-csp-endpoint\r\npriority: u=4,i\r\ncontent-encoding: br\r\ncf-ray: a1fb0dfd7bb5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"a1fb0dfd7bb5783d\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T15:50:58.144444Z","times_seen":17479511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wincent.cc/favicon.ico","fqdn":"wincent.cc","domain":"wincent.cc","tld":"cc"},"ip":{"addr":"172.67.186.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:01.183Z","timestamp":1784813581183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wincent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 06:41:42 GMT","end":"Mon, 05 Oct 2026 07:40:16 GMT"},"fingerprint":{"sha1":"0E:18:7E:D3:59:BE:FA:6C:AB:A7:EA:BC:84:31:C1:34:91:94:72:C4","sha256":"64:08:E0:15:20:FF:72:5F:DC:0C:81:CD:8B:79:81:93:82:0D:36:07:5C:D5:72:50:CD:38:F9:20:3D:4E:C3:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wincent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 23 Jul 2026 13:33:01 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIssh2nJ0TwZrWrZp5V8kxX2gFp82usdvoyogCUpXDp19yDa6ABpVWj%2FCXdV5n%2BxsQgSSbk6fq2ddeO1AhRIk3zYqiHtSo%2FOCXDtBeCWl3Snv7Vsa8jYXSfGG3xc\"}]}\r\nage: 44\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1fb0df26b8d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":44440,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-07-23T14:36:57.694113Z","times_seen":13325,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"wincent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"wincent.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.051d94cb7a946421ca739594c0908c908.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.171Z","timestamp":1784813583171,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.051d94cb7a946421ca739594c0908c908.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 27114\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810AFAD5B30398C957E\r\nAccept-Ranges: bytes\r\nETag: \"2CC04324095B3B7B80ED8D9E1169F03A\"\r\nLast-Modified: Wed, 13 Nov 2024 11:06:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10455221987969611545\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LMBDJAlbO3uA7Y2eEWnwOg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27114,"size_decoded":27690,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x337, components 3","md5":"2cc04324095b3b7b80ed8d9e1169f03a","sha1":"e49f9373aa110da98b7c96c0d062886a05eaebd9","sha256":"ea0858907e0df4b493ac009e0281568a51a03f717d818069b68df0a327068d08","sha512":"aa3e3ef9f1b49363385bade43e7b6326fb7c2219c42a833dcb8f97bc687777845464ac7ce07ccc1afc687b6ee91eec6c89ecaeb5ae76782cdf1e12838defb45b","ssdeep":"384:AIMJajL2+++vCCCCCWrrCrRsQsQ33WDVhdk9MeQGPqHF7gkEz+oaaTke:0s32+++RrrHFbVhdk9lSHFckEz+oa+b","tlshash":"7dc24c22e5a71bebdd9c4e765bc48b5a83f8bda27c0672b18d32a651150c302e4b34d7","first_seen":"2024-12-26T23:29:40.026556Z","last_seen":"2026-07-23T13:33:57.306893Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1405,"timings":{"blocked":-1,"dns":32,"connect":270,"send":0,"wait":277,"receive":12,"ssl":812},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/index/SPX.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.210","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wincent.cc/","date":"2026-07-23T13:33:03.174Z","timestamp":1784813583174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/index/SPX.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wincent.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Jul 2026 13:33:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5989\r\nConnection: keep-alive\r\nx-oss-request-id: 6A621810C390C33534942486\r\nAccept-Ranges: bytes\r\nETag: \"B7A7ED50536825D64B3825D33198C0C3\"\r\nLast-Modified: Wed, 23 Oct 2024 13:55:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11548404125275959145\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: t6ftUFNoJdZLOCXTMZjAww==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5989,"size_decoded":6539,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"b7a7ed50536825d64b3825d33198c0c3","sha1":"cf02fb75b15ad9b7f2341a713e9a67128b02cba3","sha256":"5ad5b98e486b3f6117a28d69306936b4c12bae1372b95ce8887cc93977d1ccfb","sha512":"ab34cab59a800d9fb2003d74a8c869635efde94a7b72f052733c4956e7cd5e2585b495388d8fa552404f92d36738e25f63a5ad69c9d89acc006a181cbb6fbb64","ssdeep":"96:TG/tysBhvJxpkx3uhYQ5+4tIX2c52xd8sC4QpSJetUvCgqO3w2E:TG/t17kx3uh7ACLr80QaetQCsZE","tlshash":"74c1ad73efd0387ad9405342aa89825837abef953dd6635591afe419390204d297ec34","first_seen":"2026-02-24T15:47:27.72736Z","last_seen":"2026-07-23T13:33:57.308107Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":-1,"dns":28,"connect":266,"send":0,"wait":268,"receive":0,"ssl":802},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
