{"report_id":"5695a387-a668-4a49-ab76-bc3cdf101e59","version":0,"status":"done","tags":[],"date":"2026-08-20T01:05:46Z","url":{"schema":"https","addr":"winearndrops.xyz/","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"172.67.168.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winearndrops.xyz/","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"title":"PUMP | Solana Meme Token","dom":{"size":48850,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18370)","md5":"53493c8deef4b123de105ce3861eb41b","sha1":"c21c042c9afb327dbcaf7adeefa04ceb2a867cfb","sha256":"ee20c17ad0b5b4567908135d3ae12496e18e5377bccd61be7503dd0c480a3cc1","sha512":"8363433c245397f168ded8b5e4218fb13605de79385a23b5fbfe16673c637209a1a3e2b9a13552531cf30b1c0b45f85ccdafcaf5a1f95b0eb8adf6906f604346","ssdeep":"768:5eccxksc64Jysq7vezQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fz0:4x/c64Jysq7vezqyrYaBC3h","tlshash":"d7238420f4440a3f3a1f96fda5c4ee6ca225b101d967a658b1bc40c2e6c3ff35eb6654","dom_hash":"domhashf86de8286e161721b8ecdf4b3f4af52d","first_seen":"2026-06-22T10:16:30.855727Z","last_seen":"2026-08-20T01:06:11.473159Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"winearndrops.xyz/","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"172.67.168.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-24T01:05:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winearndrops.xyz","ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-29","domain_rank":0,"first_seen":"2026-08-20T01:05:48.609321Z","last_seen":"2026-08-20T01:05:48.609321Z","alert_count":71,"request_count":71,"received_data":1995140,"sent_data":35624,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winearndrops.xyz/","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4985d0bf0482943dd017d9d831e63806","sha1":"50bcd980e1f69a43a636019a49af0520534592f0","sha256":"da25ae8be067793232422b7b7804ce748e24ddbea1958feb5bb616e275c7d97b","sha512":"fec8da0be378791cde0587542a559e550d47540e5823bf6ed74541201554b2e2665e95c8577a029abb618f20fda5198bb0e1a17f09e2c889a8f5ec672cb2a48b","ssdeep":"12288:3sER399ddRBFsFzqcTuz/FY2ZDkTpBL0E178xJ:Xt99dd3FslqcTuz/FY2tUN1wxJ","tlshash":"8015a4e0e1407a994ad300de7dad6aca4f08ec4585cfc4a7a3dca2c4b5a8c3de55dde1","size":914144,"data":"","first_seen":"2026-08-19T22:43:38.205307Z","last_seen":"2026-08-20T02:05:07.37078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/index_2.html","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4bdf2be3e4bcbc55f7ac1aaf7bae46e","sha1":"185a9e90fdac0a5ece5cf52ed2ff6da3511709f4","sha256":"377c34045534e2d984509651cbcef30e39cbdde453021ce124a3a44998277ce6","sha512":"b3866191b781ffcd8de896d15a23f750c6da65468875c648cea6dc9b84fa93fd9ad14a1512a3aff2a2efa1074a815496b72eca4f341fb5499dffba57ba1379fa","ssdeep":"","tlshash":"0a71ab3aeb00173bdc8fe9fdcfd5b8d42e62497262596520691ce103a16ce7087bed84","size":3630,"data":"","first_seen":"2025-04-29T17:20:25.925078Z","last_seen":"2026-08-20T01:06:11.552921Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/_nuxt/assets/index.js","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"277ff57a336a789e6937e47e74c60713","sha1":"a553d1f782b659bc20fd77fc8996755427393f44","sha256":"5f26c35a46660db3859393e91058e34cc690aa14a258796adf717e70179c6f8f","sha512":"2df3d30a7af50fa37b5c83beecd7005d35fe509bd7cd05ab24a63f7364943593ea1c4509b3098ce63675f28744ea4f2c50335e9bc2308260069d7657883b7779","ssdeep":"12288:yocZB5xX0VneYDHCp/2Y3dTwVQV9R4bSKqvJTw9vuTn9m2pGpTrbA8Vrml08X2:q/v3dT99+hqovuTn9m2p+9VqlW","tlshash":"d01595d2d040bac91a93689e7d7c6eaa4f88d841458bc4bb63cee9d470a4c3de74dcd1","size":946958,"data":"","first_seen":"2026-08-19T22:43:38.184629Z","last_seen":"2026-08-20T02:05:07.369875Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.17.17","filename":"https://winearndrops.xyz/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":757042}]},"http":[{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_dex-screener-table-heading_dex-screener-table-heading.A1BlAwDv.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.641Z","timestamp":1787187915641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_dex-screener-table-heading_dex-screener-table-heading.A1BlAwDv.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-2ec\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcdNxgmzn895fqJoPPBstgHs0FsNQpgC6ekAk7Lu8XSSizb8CtZzcOLTeBWwPM6yW%2Bs%2BjSwBdiGMaTRt5h8oomsJ7XtwKJKGPqFqt2988IYqCpDjL1ipfghTxOHt5mCX%2BpIC\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18bd43c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":1042,"mime_type":"text/css","magic":"ASCII text, with very long lines (747)","md5":"74e1bdc16998aac28934c5457fcec57e","sha1":"178410e32c4e26ff46b1578f5eff6e2560934c5b","sha256":"f5a70eaa5133f650cb3c6baaa87613fc12674a65bbf16556c41401f634a9cfe5","sha512":"46da39c5ddda388358731582802560bb4b1213480fc35af7f3f3748e670623cd99c42f2292ec6167f9677ec26314610d7b3fc4e1c704bf16d3dcba1e58556e34","ssdeep":"","tlshash":"0601ceb5ea02f66dcd03e180c7709682c0599940af7f6557d20185c186e7fe549fce2a","first_seen":"2025-01-27T05:58:36.647044Z","last_seen":"2026-08-20T01:06:11.542237Z","times_seen":311,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/index_2.html","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.788Z","timestamp":1787187915788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1SF3k3knSbedwkIZezM0xcL5MFFxwFM39xyn3Ys2pjpklkOxIv1m4Aih%2B%2Bwp9VKI5LWxGiEHYAuh9bxsfIYQnfO46wo5uf1cOxFsHMQnO%2FSvp46%2FAf8QfrrhCSPnZiTb78m\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d19ad4dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130874,"size_decoded":20591,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65194)","md5":"836002db391ad0e0d8f341d9f3d109d9","sha1":"5b0e262cfc0b913c5ea72f7edd419bda07a50066","sha256":"fbe516ec29c1e88e9a73eec902b5e4eb98b0cb8ee327cc8adf291f509fdb0203","sha512":"ed1a2bf4bdb2b27fcc19a3c47c6f85b81e194291a9312aa3171e4c6ba112ea55dc7a73175bb3e155a47d58bd1e8739619749449670d473b69767e20bd5247ad3","ssdeep":"1536:gvIIEIgmzDeYWLfDeGjeTy74RemNZjozoBx:gvInTPfc/7L","tlshash":"b6d3d7b29129976d935b0ad8ee37336a335b939cf687009869acd3f417dbc90e01f950","first_seen":"2025-07-14T19:04:10.628706Z","last_seen":"2026-08-20T01:06:11.545579Z","times_seen":13,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/8149.21f2b01074a4d082e268.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.832Z","timestamp":1787187916832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /8149.21f2b01074a4d082e268.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-bab\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqZfYOnGRak951todm3tUtgXSslKS2YHAku9AXnuN5rTz5NRjkarhFmYJf%2FZxt3wL40gOXEC610chJ1ShokGFM9NGKEn4PI0N1Xq0x%2BOpESwuYInH1jdjZG3MTS1sSMrpmXV\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d203d93c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2987,"size_decoded":1204,"mime_type":"text/css","magic":"ASCII text, with very long lines (2987), with no line terminators","md5":"243daab147f04ebbe97732d2e57db384","sha1":"f1732d2eb26921eaf7ed76fe2e1cc885f491826e","sha256":"ef16151410fb79f03a056b5a373efbbdbce204c02b155c71db3274b188cbbc9c","sha512":"34b33c3593b92f39719f17e27130655bed3b8918d93ad01144829912da7308fa031d771730d6913c59cebe84b477ada18cb5bbb6d74743172f63aaea363feec6","ssdeep":"","tlshash":"a951d49ee551952f370f2124435982e8632b78e3da513bb9f472b1f392c8fc85266436","first_seen":"2023-05-18T21:44:28Z","last_seen":"2026-08-20T01:06:11.495065Z","times_seen":613,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/9789.cb5ad20bc727d3820b6c.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.869Z","timestamp":1787187916869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /9789.cb5ad20bc727d3820b6c.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-496\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPsE46w0%2Fy3k2EhvgqWdlplnwgWu%2FKuqAtH%2FYLUExf9lNL0kOOHeWfKUpR7LjEkr4nRlqt%2Bnqht0LpfoOxMjcrPcUHVMVHVspi19mbP4Q4CM67fL7Sud6%2BNMs%2B8IM4qa%2BK6l\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d206daec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1174,"size_decoded":1244,"mime_type":"text/css","magic":"ASCII text, with very long lines (1174), with no line terminators","md5":"4064ffc126ef625db00537bbdb29eee6","sha1":"e0450b7ef9e55def7ce6ef7d012abcf04177487f","sha256":"c8405433bcf1c9ad435ba7bdc36eccc58641942e180d48747e8620f070b7ecfe","sha512":"1539d9b50512cd4cdeb89d722ff3a4e5ea07b2fb08f9543e9e81f4b6f3e27dfc55c96b49a3843785915bb7d8c0e7850f4a0ec1d7c95afed13f0fcf8281e7410e","ssdeep":"","tlshash":"0c21afb7dd7d10bcbf4ad016f5847da596b9b051f0a2a178f254209ae48ee9613b0704","first_seen":"2024-02-29T05:39:57Z","last_seen":"2026-08-20T01:06:11.525646Z","times_seen":554,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/bfc3009d-f0b6-4dc0-95b1-7b356fbad050.jpg","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:15.393Z","timestamp":1787187915393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /bfc3009d-f0b6-4dc0-95b1-7b356fbad050.jpg HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-115ab\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghX2Jhw%2FG44WU36fq%2FvjBC4LI59Okp%2FGOm6%2FBRgwty9uOx%2FZrM%2BEpg2sLlBo7jV%2FtcFZGoZrb92tr%2BHbhEIWgs1ONsu4mmVZwvLWhKvqK5fQ95Sa28k0ZAFhG%2ByieLGMhyS7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d173d33c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71083\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71083,"size_decoded":71825,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x400, components 3","md5":"6cc4a8bae6b206d63f8b679ee3d0afff","sha1":"184a58297a8aa9023d2423ab1ae4a19d2b9da70d","sha256":"3508f16c4546cb9be3107416756c38422ebd5ac400f4b97eee7a75aefb3d67ee","sha512":"0bb4dc50af0fbea5759197c5c942abdb05dbf71d3662b374e5a599b938c071a1fd8d5fbac99f84c407897462e31df2bb653fc994d3639dac0172a4d1fa7ab73a","ssdeep":"1536:niLLNyWRjfheYqtKzl6jQ8lOipKevzF/HcjFpMy2NzPmVtF0/1WrJEgduzNVx:WRpRDhv3lh8Uwv5/8jFpGyDF09WKhVx","tlshash":"2663e0151bce0f97881b05532d0d664898918ecdb4de666cc8ca5fe8ecfdd414ca2aef","first_seen":"2025-07-14T19:04:10.65903Z","last_seen":"2026-08-20T01:06:11.487035Z","times_seen":15,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_nav-link_nav-link-24958f2e.3Tmj03nP.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.627Z","timestamp":1787187915627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_nav-link_nav-link-24958f2e.3Tmj03nP.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-3a4\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gnU1dZVJOlBrvcrUlistdmvMWGUzVcYNYV3NR92QkVofPul3G5HwcjM%2BeIO8utlroN70e2pqveo%2Br33XgQ0wsfKAC%2FmyaSbYWGIKCVeWNJ61XSWzG9Sxv%2B9NjYVUSNHxXdV\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18ad3cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932,"size_decoded":1105,"mime_type":"text/css","magic":"ASCII text, with very long lines (931)","md5":"690091d15cf81f6cdb9ba1598a951ec0","sha1":"ecf93c76c564ff7e1a2e4c3c90985c4d6901d9cb","sha256":"167aaa1e612bb50722f6a5ef3b23df0d90d54673ff477a9373d73fdd8cc71000","sha512":"de01329a684d038b4c5fb687b2def5e88702b4c1624329985e7e0bb1f08c46a61422aa8c483293c27d815a9da49189f9b092bbe29dccbe5cae4a0e695d8e989e","ssdeep":"","tlshash":"0d119ef8aa40d67d5c33e44ca37558b8820ca9416e5a479bf3f023f00de7ee20926d19","first_seen":"2025-01-27T05:58:36.63349Z","last_seen":"2026-08-20T01:06:11.488376Z","times_seen":480,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_screener-table-empty-value_screener-table-empty-value._fMP2cV1.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.643Z","timestamp":1787187915643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_screener-table-empty-value_screener-table-empty-value._fMP2cV1.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-81\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oln%2FLqofJWBIXwUBmwcEq0ZDjenF1Fl4eEJUBsFkFTP8%2F1hvQA9Y1qzkMWAzxk6pC6gy%2BBmzOXNSAmszaHEsCbxiP1JIfBzuQmtvmZCjZblolL9Il2BunXm%2FdifFsyFEUUgp\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18cd44c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129,"size_decoded":796,"mime_type":"text/css","magic":"ASCII text","md5":"ce48b90fb383a080d4543fce21336aee","sha1":"16e3b633e58efb76161584b62a311a23fb9975dd","sha256":"e85d1ff6c5ddf09a6ff60bd81a79b971da2b4b2c8311fab56fb85f1792fdaee8","sha512":"34dc27e41a875c5e3b25b8a93b0fc0c67816b7f35be8d656bb9f48bf41e8c5dd838d46cf8f50b5c085b4c0916fc0093a9d8d355d40b4d5e9676a16ef65e0e12e","ssdeep":"","tlshash":"0db04c68c291d35b5c12e44e0269c8a5561d99432c4343af736480940ed79f12148c52","first_seen":"2025-01-27T05:58:36.658451Z","last_seen":"2026-08-20T01:06:11.521518Z","times_seen":497,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6036.3b493a9f0ab052e6447c.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.841Z","timestamp":1787187916841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6036.3b493a9f0ab052e6447c.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-186\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BU9fVZz8l98xFJmaGv4SLA7saeLqbfBzODnApqdUpV%2B8q138Rjfd%2Bhi%2BA2pVr6W%2BUcZwwWTgHmHYXU8%2BZArWSNtGXuCB1y%2FTe2Fpw0s9kIWGnzK7EqBP19oKlPPg3T5r3INv\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d203d9cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":911,"mime_type":"text/css","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"5a1c37d7733bbd6f15f4b07776449b63","sha1":"9dd5277eb09449aa3957a14445047117aa2a529a","sha256":"d0dfda27601edc8582e2ccee9d573857b163de78b452ab64a8379b132c67c636","sha512":"4a60fa1687d280e0be136afd9cd5cf427690dee83af3b7de9f2f8488bfb442d92eadce9d7739870c1f17d3d53b9529e6888b8177406173f4df7afcf4562876fb","ssdeep":"","tlshash":"17e0920671e83139e31f266582d9c8a83026edd6c455b7778c5aaac3c35cfe51a2a918","first_seen":"2023-05-18T21:44:28Z","last_seen":"2026-08-20T01:06:11.511191Z","times_seen":654,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/40f4ea95-fbfd-441a-acb3-18cd07317480.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:17.032Z","timestamp":1787187917032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /40f4ea95-fbfd-441a-acb3-18cd07317480.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-cfef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bg1n3qQlvEUlDk8M%2F2xSZWXQ9xat1NJn53JC5mQZUoXzoZ2DtRzXMZ8oHbIJcAb9eGdx2IapmoTtJgs7xL4vSbAIhZNE5xOZnn%2Bx5oOh8f37GKG%2B6va4glLOqG9HqFINBKGq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d217dbdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53231,"size_decoded":53969,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"14eba6c7b856c14bc61d5b14e8d61c02","sha1":"b1e4c285b35099bc028289ac75297502d84a09b7","sha256":"d92838929a12dec460360c7d28358ce49c5438109b28a8c70ac1bda7bd6370d8","sha512":"15e39cf3736742271118f1c89f138fca49cc22469b04e7c7c805ce0171ac8537bc8caabf013d8734cd66e8a43adb5a0c9babba802eff68dde9e7c2fcc2d9c190","ssdeep":"768:x/fgtFGFimxhPTgkN7yVtZbYP6TdYif978I1Wph8vJannL4Rxr:ZfThPTRPP6TCk97bih8RQ4b","tlshash":"1e33f2159315c19ec01837b1a1d7381be6372f255968bfb1325e2fc5be472e06e80799","first_seen":"2025-07-12T13:56:24.518493Z","last_seen":"2026-08-20T01:06:11.485512Z","times_seen":102,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T01:05:14.798Z","timestamp":1787187914798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2LXm2ivpzaNw1EThJdNrFnqI4Ncb5mXubj7hftKQ0B0P0A8jxZ0JZ6dUA5isnVJxE8AcvWwQbZfsbzH9NuPER%2Fiszgjg2hQevxRH8xS0Jdq7A5enlES6cMU0shO%2BVCOcN2M2\"}]}\r\npriority: u=0,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d143d22c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32901,"size_decoded":7331,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18370)","md5":"8b18c4830660caaf27682e5a7285284f","sha1":"5b9ea2bba705b46c043798cb3a4ed1b43a332291","sha256":"9bbc0daff735d5d840e67c8909e779fe5fc7a20b9eb08ac2a171382356d49f5d","sha512":"09cfe51f0aafaad511566a864b0dd45c4d44c2e08036d646b757bb5a4420fe59a027493de538525ddfa8128bbcc7475277690df317118d932b55825bfcd171a8","ssdeep":"768:9eccxksc64Jysq7v3whBBOgm0TMUpUmU6xjuA5:Ux/c64Jysq7vABC3c","tlshash":"22e2e7307048163c6a6fca65f9d4b33dd239f245eeab8558f18c0047aac3fe4ab97654","first_seen":"2026-02-19T05:07:31.912587Z","last_seen":"2026-08-20T01:06:11.532311Z","times_seen":6,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":99,"connect":13,"send":0,"wait":297,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/1109.b1ced88f4a839badfff1.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.838Z","timestamp":1787187916838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /1109.b1ced88f4a839badfff1.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-1cf1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoDK9qvlnN4CPEt0hdZM%2FGfjNy6lTYkP%2FdCeBxYmNl6j4eoo5DAAftTKC5bkhmtjvt66rLMr5VQV21oIZOlhwiPtrpnmBzEwydBfyI5xxzORWyRKPD4lWw8cemB6E7raDGUO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d203d9ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7409,"size_decoded":1611,"mime_type":"text/css","magic":"ASCII text, with very long lines (7409), with no line terminators","md5":"725b06a716f6373bec57aab38f3f2f7d","sha1":"02c4b5bdc0663893a38cb0339b151b84e80cbaff","sha256":"d3b41005dfd0e3293a15df68f24b81c3c9fe31d0922a52a2d86c64c9d91cab77","sha512":"543ed8c8a68471d291f651ba0a04022399593d76fe9d455a3ad3326a9a3e2c8db9cb8bf81213917966b030bb3c41944cf26ffb439efa8c0db67f6412ba3b278e","ssdeep":"96:81cLxCcbLbZ04NYCooM+4sfuGQtdE4RkuswNQ1u1ZaRrNpKbR/y/k/I/N/i/fO:z7PRrNpKbt86WRMfO","tlshash":"48e1e3bba13e56ba17031229fd5ab9386f1b6acd9c1236e574ad40d142fc3ca133741b","first_seen":"2024-02-25T08:27:04Z","last_seen":"2026-08-20T01:06:11.501237Z","times_seen":530,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5166.a12c50ad6225ca6de843.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.842Z","timestamp":1787187916842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5166.a12c50ad6225ca6de843.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-2cb\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjnoZFLRUXdtZbGoo1szItqdwFd%2FQNmHEiWoPQzHvZNvFI37KpFXCTbZ3HFtChEp6aFPDoto0BzEMs%2FflAjxj7qm5hV0xDu9bbdYARrT1RkVe%2BRW%2BZjljVMwFNFuV0imomOu\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d204d9dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":715,"size_decoded":991,"mime_type":"text/css","magic":"ASCII text, with very long lines (715), with no line terminators","md5":"f78ee1be5648d9a6bc6bf2348a4d108b","sha1":"9fa8f65585e616bc655e17b4e4e48c0c19aaa42d","sha256":"61306eacd7f82c6ee703971fe9f261e25e5a73f4bae4446b0694da973bdffa96","sha512":"1c268ebf799e6a4b095589a4a2f758131f8af1d62727b7c8a06e3fd75b4ab65584b551705541e4d8fc95a461368d3a46ce31b1448d36407d58fb9328b41e4974","ssdeep":"","tlshash":"5e01fda21f0bb62bbb779a1821305fc26fa101244b71012efe84ae1473877784700feb","first_seen":"2023-08-09T05:06:49Z","last_seen":"2026-08-20T01:06:11.523893Z","times_seen":565,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/8450.f75ab24e1ecb22d29183.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.856Z","timestamp":1787187916856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /8450.f75ab24e1ecb22d29183.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-1025\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VC4YQ%2FQMbKP%2FaeNqgbcObR%2Ffp0Bq7TzndofTH5bM%2BZweBcndc47qU9qnqC37ZbnPjIqbiCfnPetob2zjgI7EPRB2%2FrTQzCqQ%2BqQWcK3K8rQm1nGDgIOYiGQwcvo1U%2FWhN7Ew\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d205da4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4133,"size_decoded":1716,"mime_type":"text/css","magic":"ASCII text, with very long lines (4133), with no line terminators","md5":"a0340d87f1c132deb8ca3c355a45f8bc","sha1":"7e7fb8d6344c68e6a11991f822494308fc32d66f","sha256":"251f35d036ed5930ba28b1336b245c15d5d059470aa1782f4697d596368acb72","sha512":"e8d4a693a5f3db9a49bdab30bac67e3912c5780d7553af3934426431d0bcd78ef2bc255d061a65f5d767c6c697dfc81bb60dea1673ca11c2886228d08dddb2de","ssdeep":"96:PXlLfBfzcU9jULd3UYieRFoXSWJLNyUb4QOOS2b+uxEx+E9gKHdFqFtzCIJZXh:/oUYieRFoXSWGc4QOOp+uxEx+E9gK9sB","tlshash":"878143dcf76d022ab817c5bab3e0d9f133be255390263afea43576734b84d562212784","first_seen":"2023-10-17T09:01:50Z","last_seen":"2026-08-20T01:06:11.549297Z","times_seen":559,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/api/visit","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:17.357Z","timestamp":1787187917357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winearndrops.xyz/\r\nOrigin: https://winearndrops.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4Uza9ILzp6EcanSB272uLgIQJNDXnEMHxr2VOL%2B3q2wwr%2Fb%2FLcG1TkqXP96cN5UQ9P%2B2zuvnya1yU6pOfQrls2PsYvFBgebgg3UDCKuVZRDm1pi%2BrHRGHtNrdSTsVgQ74pJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d237dc7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":726,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-20T03:09:26.35597Z","times_seen":450895,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/40f4ea95-fbfd-441a-acb3-18cd07317480.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:15.392Z","timestamp":1787187915392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /40f4ea95-fbfd-441a-acb3-18cd07317480.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-cfef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTnPTkpBZb5kYXEmO99f7iPPP1g8V9reZXorqYluQewUs8QpNhApBBuX3TSPngCVTF8CDWUHLMkjGLQ2mrjZ7B3V5QfuMGTtVJPJSV%2FCcAKgdoxZ%2FmMVqM8XVztZ1sKoRzKO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d173d32c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53231,"size_decoded":53957,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"14eba6c7b856c14bc61d5b14e8d61c02","sha1":"b1e4c285b35099bc028289ac75297502d84a09b7","sha256":"d92838929a12dec460360c7d28358ce49c5438109b28a8c70ac1bda7bd6370d8","sha512":"15e39cf3736742271118f1c89f138fca49cc22469b04e7c7c805ce0171ac8537bc8caabf013d8734cd66e8a43adb5a0c9babba802eff68dde9e7c2fcc2d9c190","ssdeep":"768:x/fgtFGFimxhPTgkN7yVtZbYP6TdYif978I1Wph8vJannL4Rxr:ZfThPTRPP6TCk97bih8RQ4b","tlshash":"1e33f2159315c19ec01837b1a1d7381be6372f255968bfb1325e2fc5be472e06e80799","first_seen":"2025-07-12T13:56:24.518493Z","last_seen":"2026-08-20T01:06:11.485512Z","times_seen":102,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/4987.ca5d16a7e990d39bfb0e.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.853Z","timestamp":1787187916853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /4987.ca5d16a7e990d39bfb0e.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-1354\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FfXBavJLhqKje2TISH%2BKcW3MVVwEvUAAmshZbi8ft%2F0nZYJhTNp6Kqc970pOucsXhxg8OYTyDLM2bLT%2Bsv3o7L%2BT1gr5snI%2FTvGMfd3k9JH4ElQKH5wEYSbZq%2FmDYX0ET1cu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d205da2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4948,"size_decoded":1999,"mime_type":"text/css","magic":"ASCII text, with very long lines (4948), with no line terminators","md5":"0ba9b8dbd604f10dc8a8f4f112d6cc02","sha1":"5578793b4c384d3bb1b004e24a45520d46c2740d","sha256":"60d2fd111047e71cff976490bdd3943bf93f98e28ab00690536cd9c78eb0e152","sha512":"cd97e9990c23b262a8a54d2b9bc4df17ea13c03e36b030cce36fed7b685cba224de78b9c79fcb60eefdab150d25bdb8a0daa9e58915ee2aff5f96158c1f844f5","ssdeep":"96:Vul2+Xg++ukgDo0kMR3B22PSAB9tPYB+B9sNBPskrO9H9BrZB9P4N8+/:PEgSR3BrB9tP249mPlrO9HTrn9Ah/","tlshash":"aba103c5e2715539330f82355288c6896b5ba4e0d462abfef87633e495ca1dc231987b","first_seen":"2024-02-29T05:39:57Z","last_seen":"2026-08-20T01:06:11.515308Z","times_seen":517,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_nav-header-icon_nav-header-icon.DfgF_AXH.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.634Z","timestamp":1787187915634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_nav-header-icon_nav-header-icon.DfgF_AXH.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-32\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGDQdGX4qzbjg5%2BUKf8fCPPgrNgwLY7mlY49sH8aaa9IVWl9Qa1Nn4oxhyVddGtUpfpYJi1NhOEum3kY9RtB8UAvBCMJMefMDzzMsXbUhksvoxryoWXb%2FL84f33Yg77j%2F%2FQI\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18bd3fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":770,"mime_type":"text/css","magic":"ASCII text","md5":"bb20b40d02207b290b8341caaf5f99c2","sha1":"116eb9967b6304ac41df522cee0444bada7b7815","sha256":"41f556a26a0a23f2192a85edc60ecb213d1360e598a666139e347e284786db54","sha512":"581810b5efd7941a7417050dd2e2a985a0d481336699fd15b1dae7a8cf8156e7e1db49016422016aa619589b6c150ad7c60a1b41238a3e49e423e0155321152d","ssdeep":"","tlshash":"e49002b106167424a130014dd04198467304510696b101c4f256581f8799009e411aa4","first_seen":"2025-01-27T05:58:36.622026Z","last_seen":"2026-08-20T01:06:11.537274Z","times_seen":471,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/solana.png.svg","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:16.027Z","timestamp":1787187916027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /solana.png.svg HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6876d859-5db\"\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNqTDeEjYGwYNfmniXTYLnHOhDF5lSl7Y0III2IIxtnrbM9czbIr11Bjd23BL0hV2zymqdT6EPztJ%2FCAp%2FHHDehCqscyI1vCwxgIk20W65JdJNcvBEqb7XVJYoJE9YYg%2F6za\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d1b2d58c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":1309,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b62131a0d7668b6c550ddf5ddf61d1aa","sha1":"4e928ebe2c466db541bfa67cd56284e7ce0575af","sha256":"69d11f06b83c8f4477c3081607a01d4564b8c61513c77a5eb7dcf459769b78b5","sha512":"be9449830c40c69dadd815b963e855949bdbda4d806ab2c36763f4ddc263c21813f48985927e8c939b0463f2f8c3c7ee526a8a9afa1166a4b2ca736d8a672835","ssdeep":"","tlshash":"e031bcafe8bc612fd20c4b89cf8aa5a1641e24fef34186b8d1896f4ed4365c0161de60","first_seen":"2025-01-02T21:31:18.551693Z","last_seen":"2026-08-20T01:06:11.509686Z","times_seen":104,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/4015.1d0e3a62a59d173c81f3.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.819Z","timestamp":1787187916819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /4015.1d0e3a62a59d173c81f3.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-4ac\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vW78sa2at2zAxbflh9MpSFnJY%2F6%2FnS%2FDHT07Q6dEi2bC8pmDAOkixSHXUFCSxy2OloHu5dSeKukK09BCCmJvj8DteNBrhFvTBO8AODcDurIhleHwhyu%2FfjhqhHjctCoxYYL\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d201d88c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1196,"size_decoded":1105,"mime_type":"text/css","magic":"ASCII text, with very long lines (1196), with no line terminators","md5":"0eb99b5410054995ca3b533477551677","sha1":"b6254613df663d66ae7e4249238cc42ea10806de","sha256":"7e660c591591cab7424fdadd9682c9a5e4f264329fc0872db669d8d71085aab6","sha512":"af33f8d3fef5e8851145095b4a88f182e3241598c31718494f8669f1e6787f37eecd75ecb0e764dfe2605fb4a42115d86404ab375cea5cb76190f6a4d222fa01","ssdeep":"","tlshash":"1a21c2395329e8e975bd09a2a242fd8630a3d04f6371267cc6c079e9c5d1c7b2a113dd","first_seen":"2023-04-22T21:14:37Z","last_seen":"2026-08-20T01:06:11.551554Z","times_seen":885,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/9327.97be240031495a68333f.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.834Z","timestamp":1787187916834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /9327.97be240031495a68333f.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-2432\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ih%2FtjJlQl0OE8ViOLLMEEzpAcLkP1SktGKyfrs69twhoYSxX3tW3ZQA2GF8RFRJy%2FCy3cPJxssE%2Fl8P0gS%2Fyk5U933OiB3EN%2BVNwanisPrkWZ%2FRxsuaonhIbGNkeIt6lrPR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d203d95c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9266,"size_decoded":2548,"mime_type":"text/css","magic":"ASCII text, with very long lines (9266), with no line terminators","md5":"034bc4a912c7053f7b7a147cab5d379b","sha1":"eecd085966f6ceb292a70f36557e6f507d15f74a","sha256":"d3938e6221804261a8b18a55bede354fc45264c4717eda50ee85b156c21f690c","sha512":"c6e2f35a7b77a729cb0eb757e7b385ea70d9f7f8a849d2dc5ac47488630dc9e10ef8d746e47b971b634107b928721cd6eac01559027cf76a8b65b32ec924921b","ssdeep":"96:rbjgPHV4WH4SO9bPAhWR8HlTmSdJQl3IUVnzBED0R5Dyn2BiXyQ59PAHnrB/kFlu:ThaOeEsYHCfegIecGk7","tlshash":"791245b28f55302ffb23d1687588abc99b76505089a1672efcd57426c1d727c0b72f41","first_seen":"2025-07-11T11:18:53.930588Z","last_seen":"2026-08-20T01:06:11.542985Z","times_seen":25,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6025.263b457b1a7f9ca139b2.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.860Z","timestamp":1787187916860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6025.263b457b1a7f9ca139b2.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-3c9\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2G9ZtL4GcgVDRojYelFQROlvBHfLWOnpQVHDy%2Bk0P2vUKvLuljxxgFLS598z%2B%2BJd7e6PCfDMuZag37vrq2C%2BR9JdoWWTR5ByRJHYtkAqfnatEhhlx6QX2n3OOhujHNOlOdd\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d205da8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":969,"size_decoded":1097,"mime_type":"text/css","magic":"ASCII text, with very long lines (969), with no line terminators","md5":"554f3d5e581913c0f637d2dd2f6cacb8","sha1":"a8003050bfe06d2c84a1d69de3f17701b29bde3e","sha256":"5d7679b0f86c50fcbf6bec9ddea7ff8d04a081140f085ee73e58df9c151b04b4","sha512":"74405ef693fcfa2e298f0fce091f89402a6ec838d0d84d6f2c6f960c2bacb17bc06668914befe8c2f961f857495fdc2f569c3001547e5e6bbe39bd65e31c784f","ssdeep":"","tlshash":"b0115b48ae90503dba0f093d425985ad53da74b1f9003bbae572b06841d97cafbb1d3d","first_seen":"2023-05-18T21:44:28Z","last_seen":"2026-08-20T01:06:11.496394Z","times_seen":618,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/3939.4d0187960a564ff5a557.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.861Z","timestamp":1787187916861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /3939.4d0187960a564ff5a557.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-24b\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQKEQ5shzrBjpoAdr1%2F%2FFJtfyyb6VQ%2BWdTs%2Bg3jT7iAbASAO2pat68c9hbKYLZwZDs0B%2BQaATg0lgmyO%2BWb6HYAVLdlNaZzHWTmildlGAF8L9V%2FVfovg1bScBFOsY5Q54hUj\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d205da9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587,"size_decoded":1068,"mime_type":"text/css","magic":"ASCII text, with very long lines (587), with no line terminators","md5":"12666abdac7ede94d91d4e2c560fedbc","sha1":"af909bb202d903341b40ee365cb121b2bbbce927","sha256":"59f1d8849c7a0d03fdeee8237bd66ae17fec7872abf2bd9c4dded1b66938717b","sha512":"f262003904c24f3ba2d51677827ce01291e752434ba4cc87569f0a3e7b2c90132ea7e4ba3cd87ec8013d289bbe8d90f7951045e5c85eb89d5556d6d8db82da03","ssdeep":"","tlshash":"c7f00253cf2068788221e122c5427b883131692b84db951fd85a297ac0dd040221415e","first_seen":"2023-08-10T06:40:13Z","last_seen":"2026-08-20T01:06:11.524822Z","times_seen":565,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6752.207eb3cc75b3ed2c6754.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.830Z","timestamp":1787187916830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6752.207eb3cc75b3ed2c6754.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-c2c\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4CZYRNBGmR7UeaXdy6SJ8%2F5eXCx5D8bEgHSRiMUEJoxZ60ypTozBjG8AO%2FmepcNzWk1mwHvsDP43lcA3yeCo58ucPvywh2H5rDLfTnFAii0mIRUTQQUs4WF1Lt425h7lU9O\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d202d92c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3116,"size_decoded":1224,"mime_type":"text/css","magic":"ASCII text, with very long lines (3116), with no line terminators","md5":"3eddeef40e42e47a5b80696cf856409d","sha1":"cdc651166e5f9dcfc2a9dfa8433886ae34ca3991","sha256":"c3d9951b4bb01d6adcf5ce5c38310ac60cf54093b83e543ad154dd93f3493d44","sha512":"4de7bd1612e8a37ec13a28c5afb2d640c2542385815037dc7358aad4ed019343375e16b3a99413dff0db8660481ca963134f89fe9eb021d60ce5ba9f5a0e6c9b","ssdeep":"","tlshash":"6651b659d591a03f3b5b3028462bc1a8533eb4c3da8127b9f47292dc42d6fedb763419","first_seen":"2023-05-18T21:44:28Z","last_seen":"2026-08-20T01:06:11.519126Z","times_seen":610,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6985.2cd225354e2fd236e8e9.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.837Z","timestamp":1787187916837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6985.2cd225354e2fd236e8e9.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-60a\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqJ%2FI8c87l8ErWbvCCAPq81khR1dmjnmIHJWmI6dST%2B5b7ZgNjX4B78L0mfK8aLa%2BXA4Sc5yY3hyFLoSe15QVlMKK8EPPAuMbFcD%2BVjJ8bF5YjX78z%2BVD%2BZaFbHAH1RzJsJB\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d203d98c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1546,"size_decoded":1287,"mime_type":"text/css","magic":"ASCII text, with very long lines (1546), with no line terminators","md5":"b73b903ea877ff44453f7f3744b514e5","sha1":"8d7bbe907cbbb24b644580d287c12fec456ff445","sha256":"1ebf783b63da16fbc52f3571aa0947795497cbb8e9a6e99fffb9f7b1d41f1f0d","sha512":"e80a36916719c80b9eda9330b69e0f5f676653f3724176eb222091e277f74a38d0acdcea26c898b92af226eb764bd0e826b8237ab34d64cc4cecf29203ec46e0","ssdeep":"","tlshash":"a031ffa2a2123417e36fa11ca19c9ad4227a2561cdb2170fd825e465c6e77ec2727906","first_seen":"2024-02-29T05:39:57Z","last_seen":"2026-08-20T01:06:11.476459Z","times_seen":530,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5145.a2b224fd27ab2941c565.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.840Z","timestamp":1787187916840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5145.a2b224fd27ab2941c565.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-82\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKWavMhO3zWRB3oJ9cHeoutxxoWdRZqIZSWDRFMAaqwFham7O5ehJh%2FlkL1kFxOcEUO7JNYwH2D2kY8mrVc1jzT3fVRptY3SJ%2B72m0PDAWP9%2BocETbqDWltKcVT%2B1JHdpAvJ\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d203d9bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130,"size_decoded":816,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"474be8f8d7906b2d35dd080e809859e6","sha1":"1fc9fee21e5342951573f37cf0b84dc76f1fb743","sha256":"97c9b7c2cb20871ffe2ce3f45a20a5017100a9b0c7cbaa39e1e0a9b5a102f987","sha512":"871d8b256bf34fd16ba39f714c1f894d8d7d20fd7f4a22fa37f729b77be8d89cb948c021ec63f5b14dc8dc7a7de69674f6f0e4e90b2302b473883a18379915a9","ssdeep":"","tlshash":"fcc09b346fd5141db60b3457c0e89e45552d0271c4147f3f551d74f191401dd3373250","first_seen":"2023-04-17T07:26:31Z","last_seen":"2026-08-20T01:06:11.53108Z","times_seen":607,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/9842.ceaeabba258d065497c8.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.855Z","timestamp":1787187916855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /9842.ceaeabba258d065497c8.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-ba5\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jzmggNmGbdEXPS006fNExZiQ7K%2Bhgj4QH3IxUNpFTzNBZ%2Fw9UkFeH5cFF%2BnCOG56rSGWHsFEsq1jnbTWqUA8vM5W4JJJNAHScQY1ICRJuc3jXM1vmwh20Wqn6A%2FLZvY%2B9Lw\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d205da3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2981,"size_decoded":1392,"mime_type":"text/css","magic":"ASCII text, with very long lines (2981), with no line terminators","md5":"126942d3961aaaaebdb05287464c1493","sha1":"e5acce20a09f8c01d3523ff71af4574d8d1624cf","sha256":"1aed9c45c07b77bc781543f044a5cc52c4e566bfa63e573664b8ceed2b81cb73","sha512":"a3537ec3d46437f65e01960d4d1e5a7dd7337489cd7dc222b9eba704011774521c4053c86c4af24a95cbbfc1cef62b4a638ae6bb4b7c9289c49c00efe883be42","ssdeep":"","tlshash":"b251c3ae075e9cd934ec1b915763fc04377ac19e33322dbc618525f20bd2d39d5aa06a","first_seen":"2023-12-26T06:34:56Z","last_seen":"2026-08-20T01:06:11.548217Z","times_seen":550,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/956.1e89775cfd644d656c56.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.871Z","timestamp":1787187916871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /956.1e89775cfd644d656c56.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-699\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3V6hBzR8zc%2BYqVOhViYXy8WImLKo71y4zUtNSr2b4lZt5SCVlh6Taoau%2FbXLmDId8EWQrkDkUTOvtyELnWU5QyMmKvkSjfyLmijjivfOertlQ5Wxh%2B39VoBZQ8p8WVh0kAS\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d206db0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1689,"size_decoded":1382,"mime_type":"text/css","magic":"ASCII text, with very long lines (1689), with no line terminators","md5":"fa82d43944433b728e1c1eda071e698b","sha1":"f3beb9873cdbee6689bc8512062dfae1545271b8","sha256":"9ef5d6907b0c17b6642d21164a0ac071a0d2ae00769ece377f285edfb4aad4f6","sha512":"9b77b23e25321e014cff53f16c4af21079b9cb292caf15e3806940a5d4d29c708ee2ce6392a14bff2262b45fd1b54c57a33f6c2db6d64edebda65fc3c919a1d1","ssdeep":"","tlshash":"8331bfa3855b001e7a1b4329aadc5a8d493e9404a267fbbf2463709547c968f326f604","first_seen":"2024-02-19T02:06:16Z","last_seen":"2026-08-20T01:06:11.536294Z","times_seen":539,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_screener-table-row-column_screener-table-data-cell.Zw0cQjnx.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.644Z","timestamp":1787187915644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_screener-table-row-column_screener-table-data-cell.Zw0cQjnx.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-26d\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FFVpc2INQHXdDL1vxIiYrx19Cn6%2F6YeRAaHQhLQln5vbDtDGrwtM9d5pZjEFdcjGelUj5viXteK0mrKtDa6w1PtnpbSX2fG2VWY%2F8VgwcDKk3jUhNf3mxUoLJdZKecc2d0p\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18cd45c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":1003,"mime_type":"text/css","magic":"ASCII text, with very long lines (620)","md5":"aa0be9fb44847fba4f38aea85da34191","sha1":"e0db39149bf2d4ca1ed83ba9df51980956a5759d","sha256":"f87f7d8ab0b91391de46351d9bc0ebb005c22429adb2ea5143ad32c4ec61dbf9","sha512":"51289b956b215d96a5ffd70c02c1483719e5a569bca9d0b173e63572004cf1253bfef198196e83b3f447b93f071bfd7ae0b1fb5de459b503004af9f4d730ac7f","ssdeep":"","tlshash":"a0f04ea9c751e27d1c27ea045374adb8434eb449ad870bdef39016f44ecb6e21426e14","first_seen":"2024-12-26T01:49:45.578933Z","last_seen":"2026-08-20T01:06:11.522305Z","times_seen":388,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/index_3.html","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.792Z","timestamp":1787187915792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cj7eK8F5PV4LHKPmkmGa8h9Zp%2FD55F%2BjOWVsRz09Nay83fRNt3JzvJLHbBowTbduLrwMh59mRo%2FaqzbHeNTdJdYwCzrWcLkWCwIyFgA45y5HYNU%2F9uCCNz47BZ2aOzbC6d8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2dd7d19bd4ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":761,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-08-20T01:06:11.513182Z","times_seen":501,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/4788.3cff897925f7a8dbc837.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.839Z","timestamp":1787187916839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /4788.3cff897925f7a8dbc837.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-15b1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wicAtAS0rdmO%2FTWyuszcH15ZnetmqbnFuBRq2RRHxlIEer8NFMnZa94LwLS9ypS%2FYdcTz7ojnL%2FAo3shO153Ss60q%2BUYkMwoXZi5eC%2FvLpPKykHlGlkYxAfdvSIvj693i92r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d203d99c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5553,"size_decoded":2087,"mime_type":"text/css","magic":"ASCII text, with very long lines (5553), with no line terminators","md5":"a17dea79b366fffe6b3107b46445fbeb","sha1":"4732e89490266d87729966689e011c8a0568e68e","sha256":"ba0d68eb27f54746046c0fa802f98c74fb38c76a05a3df5a8ec6ff3b6883482f","sha512":"ea1a62a4ef471de419aa83d639c4c4ee3033308a1b4358fd9139891e679b13aa6fba235d508819656927025ff2526dde6719c9f15b097531743b18cca21ba9a6","ssdeep":"96:W2/roMSo8OqVY85BMJX1pYhspoZsp4UYr4lyDwpdIf2wWwga22PS1wAwIpAwIY28:EMSo6eJX1rpoZy4h4k8laQCgfbHgU","tlshash":"f5b1f008f1f2573d270f606949d4a9c4a22f90d1c7533efeaca6b0d149ce9da53324ac","first_seen":"2025-07-11T11:18:53.956536Z","last_seen":"2026-08-20T01:06:11.544113Z","times_seen":25,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_dex-screener-table-row_dex-screener-table-row.CkZmlgQL.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.645Z","timestamp":1787187915645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_dex-screener-table-row_dex-screener-table-row.CkZmlgQL.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-18cc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIt0wFdGx2TCUl%2BXHmOr2%2Fi2zhjdFI10NWKSrT3T4FL%2BLWECvQnm8jONar7jF5Hw6RJp%2BWviAvZ3wFjWPsNcNgFiU3TPFH4UCoF%2BbH61MW5Qujgf0gnObBE%2FJTPVUegLUiGx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d18cd47c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6348,"size_decoded":2006,"mime_type":"text/css","magic":"ASCII text, with very long lines (6347)","md5":"3ac11dff5d7b76badb71f69cedb27c65","sha1":"9f7dcc062e1905712f862b49fc7e57aea901c482","sha256":"3cbe8683d70cb2ab08afee0644f3b5cb65c63d8d4a5cce0a18617d24d883aaeb","sha512":"393ef1b5dd726a6a8893da1945244b9d652c04955cdfec2343d70122fd636df7c92e257588015cd64961b48f3788522171d5779922433faa5f83702259fe29d0","ssdeep":"96:TUac7F4rugizaPEn4ad4lErD3pSrwOuHyJilbE/dvj:TNQbdwErtSEOuHPNE/db","tlshash":"9fd1bfb4e711d16e8c53e5842b34d8a6800c9d099c57737ff35060a14ee7ef256dae2b","first_seen":"2025-01-27T05:58:36.623149Z","last_seen":"2026-08-20T01:06:11.532927Z","times_seen":240,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/api/is-banned","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:16.807Z","timestamp":1787187916807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winearndrops.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBmuUVW9h%2BAb0yxEJa1fRp9hKRATK5WZlx0UsnMxgTbUpBIy5QOLPr20gm91t64dZc%2F3yOa1%2FGD567uBYAkDBRuSnw2E7K45i8BZENIRqR3SeZj5%2BboZAkIbkLk%2BEAxlgryy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d200d84c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":762,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-20T02:05:07.356599Z","times_seen":119808,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/_nuxt/assets/index.js","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:15.385Z","timestamp":1787187915385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 19 Aug 2026 18:21:58 GMT\r\netag: W/\"6a85f446-e7876\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HI%2BwZ4nDCx3D1fA7T4LVw%2BffruVvhOyIywhfJwbzlv3%2Fqv3LxQSz094JKwNt%2B14nyTs2vyeHWevJU%2FwUx%2Fy1qabHn4gQgCNEDgahYLhf8sYa9uCkblSysqll4IVc6rQYYf62\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d172d2fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948342,"size_decoded":231332,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62836), with no line terminators","md5":"277ff57a336a789e6937e47e74c60713","sha1":"a553d1f782b659bc20fd77fc8996755427393f44","sha256":"5f26c35a46660db3859393e91058e34cc690aa14a258796adf717e70179c6f8f","sha512":"2df3d30a7af50fa37b5c83beecd7005d35fe509bd7cd05ab24a63f7364943593ea1c4509b3098ce63675f28744ea4f2c50335e9bc2308260069d7657883b7779","ssdeep":"12288:yocZB5xX0VneYDHCp/2Y3dTwVQV9R4bSKqvJTw9vuTn9m2pGpTrbA8Vrml08X2:q/v3dT99+hqovuTn9m2p+9VqlW","tlshash":"d01595d2d040bac91a93689e7d7c6eaa4f88d841458bc4bb63cee9d470a4c3de74dcd1","first_seen":"2026-08-19T22:43:38.184629Z","last_seen":"2026-08-20T02:05:07.369875Z","times_seen":8,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_icon-button_icon-button.D4FOB2yf.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.638Z","timestamp":1787187915638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_icon-button_icon-button.D4FOB2yf.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-dc\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbO%2BTBUKWJPNbAv9F0ViKG9Ox5YLIpcOanIzYX3zMF3hFU7NqLGyXBwoIONcorqBD5Rkz3tU3Nrrc1rd3i1N2VsPUFVB%2FZXL1pJB7816QxU27VzWROUgx21yGy4%2BZ0nc1Tn1\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18bd41c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":860,"mime_type":"text/css","magic":"ASCII text","md5":"32ec57c6c8fdbba18ab3e2b1992c6d39","sha1":"f9e79680f472450ce67364c4aea570ce6ecd5e46","sha256":"69a4a2e0d03a2c340eee78275dd4e7d97402ea7bfd4780b69226be8f4b457e45","sha512":"8877a004b5870b9f678a0360d71e6b534298cef2a2588976be6b3d4ed0bd060c011489e0fabc7c523ef78bd0af094c5429e01519bb629e0a849de47bc64e1377","ssdeep":"","tlshash":"f7d097780b800a5c9d33d86023b72201f012a463c9e2064201a1ae1ce2cf38709d9a98","first_seen":"2025-01-27T05:58:36.629659Z","last_seen":"2026-08-20T01:06:11.499094Z","times_seen":471,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_screener-table-heading-cell_screener-table-heading-cell.D0I5cm_P.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.640Z","timestamp":1787187915640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_screener-table-heading-cell_screener-table-heading-cell.D0I5cm_P.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-49b\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FsJ%2BMq03BMHuhUlIbF3%2BdUwzvUcCaYftfZl0TjIfPtn%2B9%2B6zs%2BlfOr%2BgnpIOK7a3HJa%2FrPcvMzIkNrjZ4WPHfr0EjMxHXpV7sh%2Bp5JUrzxHTEysp2C%2Fz2BVjZXlb79Q9l%2F8Q\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18bd42c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1179,"size_decoded":1186,"mime_type":"text/css","magic":"ASCII text, with very long lines (1178)","md5":"60055ca7a9dd5f24c4cbaf749cd7870d","sha1":"54a1284e00a372b57cb9fd77f1f6e99784d7f782","sha256":"4fdf8a9826d912b2759300d87d340a991a16274b2cb7861bba9a3df09612218a","sha512":"a744361da4c03b1fb155881ef5d142856236e20378797965e482a8b923ecf396a8d48666e1f9a821de26accd9f38e0010b7c97bb29f3f9e2f393bde086879ed3","ssdeep":"","tlshash":"6821bba5d611f26ddc22d51993b1b9b8920c6102ed174befb3a051e04ae7ef21d15d06","first_seen":"2025-05-05T11:11:19.276559Z","last_seen":"2026-08-20T01:06:11.502881Z","times_seen":496,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/3066.58a325f25b087530293d.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.867Z","timestamp":1787187916867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /3066.58a325f25b087530293d.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-1c24\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjygrJezpIBdb1066xjeClJfOQAUInAhrkzDsIO9us3jNMdLCqpj7N67uJruc%2FvN5jQRYl2WeLZVSqxRkxjjEr0gRsncXfpXZocILgxfxRQRXtQyuNWNtMqFJtHoWdjP3ArL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d206dadc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":2346,"mime_type":"text/css","magic":"ASCII text, with very long lines (7204), with no line terminators","md5":"50e412b460f6bbdabb659fa10f187351","sha1":"e1aee7c23b0d935ebb3237cc7d61aad5d14f4a24","sha256":"80037d9bbfb511d969bafce13d2c620fa9e505cefcea9777b635166245b02a43","sha512":"bb66c1641bd132e3760c7918a89531cc59bb14e40db95e9afa323ef7c0636acd78258994a9355ef17069e6df596fd6ac51597333ae2aec961e0c5493d6c0030a","ssdeep":"96:mfgvTNbP1Nb72AxaWhOPskRl/dfgl6GEhJJRZ5DCej5DaJADn0JADJ4xYGkD+abT:E+Td2NMOPskRl/dw6urG4xNkD+m3j","tlshash":"0fe1626ec2605139766f651bc9c5c74de23a80e6f606b7dcb91a34f589c4fac032ea07","first_seen":"2024-02-19T02:06:17Z","last_seen":"2026-08-20T01:06:11.511884Z","times_seen":534,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_pages_app.BoYzLVi2.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.636Z","timestamp":1787187915636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_pages_app.BoYzLVi2.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-111f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rs1FCufImEPOoNG4XFVha1eV%2F9HC3w671Xh%2F7hTOuGNuhf62C3%2B%2FxvpzOFQV2mqIRro2HSxqKLdXnlWxVb8C2RjHdo3Qy2EuktvYNiCg8cau76tBw8Btkx1nyL209nFgzOyu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d18bd40c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4383,"size_decoded":1173,"mime_type":"text/css","magic":"ASCII text, with very long lines (4382)","md5":"5e59d6c08e502fd2f7018413ecdda053","sha1":"fec82f71b2e83f6d6b847311d1023566cb9be100","sha256":"9de0cbaf7101bc0affd85cebed7f46c349a87dbc1b314272cac94d9e45ea0027","sha512":"aebf06280845718e02667f87ad21d5a0f91da20416d3c445c82d9868946745c7655fcbf57a06fec0e1cfc1d3eea802215755751aa1d7138ab1fa4b214ba852b1","ssdeep":"48:sBsUKL6D+lUKo6DPCUKB6DETUKG6D7YnQFK56D5Yn6FKj6DoO:PUS6+U96uUU6yUH6g+o6mQG6z","tlshash":"63911c30043ae844d5f7cc7234cebf03381da064669a5536ea295ae8ceda47b53e5f38","first_seen":"2025-05-10T17:58:50.102968Z","last_seen":"2026-08-20T01:06:11.512454Z","times_seen":25,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/pumpswap.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:16.028Z","timestamp":1787187916028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /pumpswap.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-8f6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uK0EUqwwbrWveubGRXlFT57YN8tj52FVltWvl2Fl9r6EYGVGEiHLxSDGCff1Jb0XjC%2FaLxGYa35icrXtMMcQIfOwWzAykmq6APYhsgGkc9YUrALONyFFnIMfLQ%2FFFPTPIBJm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d1b2d5ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2294\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2294,"size_decoded":3018,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c62c8e4469782910a406eacea618f0e0","sha1":"e91e2e102b8f3f89262c45abf57c6e4eaeab4d2c","sha256":"663ac69ced70669d25632e07ac3101add711d6afc02603351a3917d405b3a76c","sha512":"5d307d544ae3ba81417e475f8e9248138a197732f5ebd4a7440f9f93c6914b75adb2e694f3a0bebb9676180a3a57ffbe554b539bfa668f24172a1acb8de1b794","ssdeep":"","tlshash":"bb414d16a52017980d07dceb2c357960698420ee511ddea5e33972939fdb08a340a69d","first_seen":"2025-07-06T23:51:49.898263Z","last_seen":"2026-08-20T01:06:11.489637Z","times_seen":60,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/2191.bb0aa12f5e562fd483f3.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.827Z","timestamp":1787187916827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /2191.bb0aa12f5e562fd483f3.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-7a75\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2FoArom%2F0cPCsWcchPTYbCl73WvC17Ov%2FEoWhgMNth6ishtgSYXTR%2F5bjjpHR9E8o01ekw7bh7vV5BjbRZM5M8NEzowQBx3dAPcgA25CAfp5aW%2B6s6H6NkPGJkaluO5bF5lO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d202d90c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31349,"size_decoded":3720,"mime_type":"text/css","magic":"ASCII text, with very long lines (31349), with no line terminators","md5":"f87fc9794d4d48b23713e8068bcdaedd","sha1":"a392c02858cfa04399cbd3beaad0124c2d0fb581","sha256":"7b6792edc106c0f3583f00e145e3111f54e361a491d82c65ba6abb7e73b0be6a","sha512":"3e01ebf31453b90267c3355f1c118a8060262117b48ada6fe3702fcc6906f52fcaf7ea5ae15d923935b390042c62f7336cc78e6d073444018d8ddc9941773fa0","ssdeep":"384:ZbwSpwuEyGa7zmMmG0gncIRbz+7DvjjHzkwb+5P:pwSpwuEyT7zmMm3gncIRbz+7DvjjHYww","tlshash":"40e26b52b2c49b3977a3c1a9a15ef46177502c7cf10f3afff0b46ba429c192b1984726","first_seen":"2023-11-17T05:02:33Z","last_seen":"2026-08-20T01:06:11.527076Z","times_seen":577,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/3502.c49903f7222870ff8aca.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.829Z","timestamp":1787187916829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /3502.c49903f7222870ff8aca.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-11eb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxpgFrGcXkpHsWqadgo2RBAMo9XFIOavrliXIc4I2rZGU2T%2FV2NEy%2BgsYpAN%2BRwtr%2BHR51tEtLRe0CwzkPvYy49vJT8y%2BZ2nBURYDAwYwE6IZqnFFuT%2B%2BmA6xu9DEi%2BNRehd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d202d91c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4587,"size_decoded":1542,"mime_type":"text/css","magic":"ASCII text, with very long lines (4587), with no line terminators","md5":"2188c43b0cb6344cd382d53f6dd9f0c5","sha1":"04b700a25b47812c57dd5c97c7f1443cb5323ff4","sha256":"339c9dd9db4fe476a3edd73631d7322327ac872155c5c6c617a988b8a2f65204","sha512":"c5908784f55083e131b03a8685be770088bc508ff1fcbf7d289de23dd9a6d002642c112bfb881d245255e134df387d05c989e013ab514d1ad96afb41ececf8cf","ssdeep":"48:NXw/w2qSRU/ZOWLi5UYVhJBpgHFXSnxRNFONNwKxiLwVIiHAr:NiwuRU0Qi5DVbgHFaxR+bwKxWwSiHAr","tlshash":"da91465096107076fa32a678a7b085ce377d213cae61ea7b70f0db585fa0291d332ed0","first_seen":"2023-05-18T21:44:28Z","last_seen":"2026-08-20T01:06:11.538091Z","times_seen":561,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/9916.60c48148a54dba9504a0.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.835Z","timestamp":1787187916835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /9916.60c48148a54dba9504a0.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-22e0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPbNeKrcIcJMZDUj4R%2Fk45TFycwSmuwOKca2E0vJxqUn76N1%2B1XKzwgCmH2lJ8X20LLyuP3H8%2BXGGMuXVi1pucEEcKLtTiBD9lLqbsAsxeQ0TyrCOFD%2Fmyurrpevps8qu%2B7G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d203d96c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8928,"size_decoded":1979,"mime_type":"text/css","magic":"ASCII text, with very long lines (8928), with no line terminators","md5":"a19c9792416a16d634b43f7495395835","sha1":"f7d09e2f6df58aae3b10cd0a6692397f847086b4","sha256":"8c96f0014c07251bfc62c8d1544e5c0f8c8384e95013e5e03a8f3ca581d29f9b","sha512":"79edfd3a76aeefb42c00afbd449aa61acf49e40d9862a02b0566a32f28841fdc38f772b959e06078099214462632255e76295e84da0db9ed50564063ec19020f","ssdeep":"192:iv5GXDyeVV73YS9jdje8R5khfScQmvSwzIUrkuF3zWNbsOL9dk6XjYA417W:EhWx","tlshash":"fd0244089a97e02a750f2164820cccddb36a34fae941abf5f873916686d1fd472b4d2d","first_seen":"2023-06-09T06:28:15Z","last_seen":"2026-08-20T01:06:11.547206Z","times_seen":672,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/1033.5197f9f8b8500206d06c.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.843Z","timestamp":1787187916843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /1033.5197f9f8b8500206d06c.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-f3\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDJwRJnOxzeTU291rsNnkDn7faV3EWBp5hci6rvy%2FXmATdYBTEGKhlh6F2boR0s5bKbL%2FBwrwoZoGEV8H4PNNzDzcBJ9E0pLiSWvRpWJ%2Fo9V9lbHEJTpcYOF8Wez20P972kx\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d204d9fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":896,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3354e5501e385152b633087ceda225d2","sha1":"4c6301af597921ff5336820643bfe2d47d6dbab1","sha256":"5d4e2c3378368f3b2a07486ac550dd10bc12a6812aaeec0146eefe93465ecf80","sha512":"b3e08f1346956fede55bb159b4cfcc141c489c3591321351f24af738de31dcfc0d6ff7688207946135d8e5fe75c3e121b7d6c79b40dcea8be31a39137ac5ad2b","ssdeep":"","tlshash":"36d02b49f644d210b19fd021d6eca04b3514f41a1840b9b585d08ac580046e167d0758","first_seen":"2023-05-18T21:44:28Z","last_seen":"2026-08-20T01:06:11.538791Z","times_seen":638,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6949.19355e81a60b640ea097.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.863Z","timestamp":1787187916863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6949.19355e81a60b640ea097.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-167\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ua6Sv%2BKZY1RWtjSpvcj3grvqnp94TXg7nMUGOkyozawtxl%2BEtY9GFIg7birbwxpV%2BIEKKnMJiPIXUWKGWLBmE1t3mEKrINTKwF%2BKIfh4A9YHQPOUIy5ASPCjfDKWWwOPiZ5u\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d206daac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":966,"mime_type":"text/css","magic":"ASCII text, with very long lines (359), with no line terminators","md5":"452ed2e8d99dd976cf8e1f7f37ec5fbd","sha1":"6eb872dbb7fc2c26bbc1462b80102394b620845a","sha256":"8ab0bcc1e395b610757a474de2fab1150700e77461c0535cedd756bfa6640037","sha512":"8e6ebe741d37cc188378cdb976278fc121badb01ba63265d9303621c34676ecf0138ceb43fc4c78952c0bbdcb46c67702c0ca6b6ea3ce70a5a1491d36c786687","ssdeep":"","tlshash":"dce0c0319546500f3b03ac7225a02b8e91b6c5425001f339ded7f62582c20d67cb3308","first_seen":"2023-06-09T06:28:16Z","last_seen":"2026-08-20T01:06:11.540497Z","times_seen":618,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6221.bc53670dfb8f982908a2.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.872Z","timestamp":1787187916872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6221.bc53670dfb8f982908a2.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-3d21\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6zFG9vm5sB4uFrSegyaVOz5%2F3xqfpM0eaGYksHKJwTUHjCVL1G9IISZaVvEfbRJYNXOpUC7kzndL2JTGymP5SCwFryQkxDQNx%2FmgNKdC5eStcdp17jcyEbUInX0YvvL7f1R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d207db2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15649,"size_decoded":2805,"mime_type":"text/css","magic":"ASCII text, with very long lines (15649), with no line terminators","md5":"295ef8c27b2d204555c9d52c250c217e","sha1":"0ea79c33b6fbbc9be0912d632f3bd1b0783bbcbd","sha256":"b02ea0d2e635dd6e30782d427900d28925ef76e155184b6dd805af226800236e","sha512":"2eaf2ae346c5c35638d1e3aac479b5a6dad83b9bae24c572e044b256b0a349c9342f7691f576efb012146e4df2051846efb72ec994dfb7e9dcb8cf05908e1b2d","ssdeep":"192:npNACv3zcKVUumoH4SqsSBQhmU3vCSgypuZw5CALjia0oTMZy:np53YKVUumYSBQhmU3vCSgyx","tlshash":"6062cd2763844a3174b2cfef215dd24bf6a14ee1f61757b3bc707a049a8294d1e62f22","first_seen":"2024-02-19T02:06:17Z","last_seen":"2026-08-20T01:06:11.516366Z","times_seen":537,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/header.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.991Z","timestamp":1787187915991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /header.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-5254\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlzI9cnV1okwpDRQ5EUMijv%2Bax9ED3J8qZ4jr5JFk9uLufWbwNeKCW%2FusxKJHPKpIswRNdl4WVOpxZ%2F5EKYQK4XRArGvqAbPfgqFbR3LVe1Aurn60LU%2BRr8S2Gb7dvqyKb2o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d1aed56c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21076\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21076,"size_decoded":21806,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd282258aefa36b7d42b72a9c4b8728d","sha1":"4cf1ec8caf3e96fb39d1db88267a48f77c7f59f9","sha256":"abd1ef40ba0bb1f5e30042ca93f26b2d81b9bf93c380d44639394899fc68ab25","sha512":"a2270759452fdc190bdf92751b6d497f67a7f7228091e2b09161b587e92591091315b3ce61218fb94318b4d8b49aa00b5f5d2bd073adcfbb3ed483f7bd0b04e8","ssdeep":"384:f/EGBf38hkcxta3qDLGF7FUie5hR9yWn8kceSqosNwsRsKM8o3Xi3dn:EGBPoVta3GGF7FU97yoXL/RIU","tlshash":"f392d1893b3d2ac474c060151eec58aa5f2cd5d177422ef6ad72fa24780674d2aacfc4","first_seen":"2025-07-14T19:04:10.649195Z","last_seen":"2026-08-20T01:06:11.53376Z","times_seen":13,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:16.792Z","timestamp":1787187916792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 20 Aug 2026 01:05:16 GMT\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-20T03:15:30.339941Z","times_seen":41032,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/2666.fbb750fd312778403036.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.818Z","timestamp":1787187916818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /2666.fbb750fd312778403036.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9MepcZ7zObnoXpGnNmY2qfFkj2xEXzt2FGUrb9uIoqFFKgZzzVBkZo%2F2FNxZwQMmtFfFGEwOBPsBHsAuAVWmWQVXD34kR%2FL8ojZDPS5xKPgSSsweSZGCZxeDaBrN%2Bi8tuDK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d201d87c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":723,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T04:30:40.665703Z","times_seen":17984494,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5993.4705829d0834140ee3f2.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.826Z","timestamp":1787187916826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5993.4705829d0834140ee3f2.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-1a75\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tstPMlvhMlxPn1G8ILn3XJh3kgxXEPkZwrWjSegYiqmcB5D6LThfPAN5KXyYExTe1oumAro71%2FSYpPtzCrQ7rMDEPnhkIQ5n1NpVUE82%2FMEpXGc2AXgLDyo5PIsAtyuYDoaB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d202d8fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6773,"size_decoded":1977,"mime_type":"text/css","magic":"ASCII text, with very long lines (6773), with no line terminators","md5":"726b0b4d05e0a27668405ef636988741","sha1":"fd8998ede3eb0346cf0953794a43bf94f552ec88","sha256":"37bebaf2eb24d937fcea16a9b8afafce2b5128a2395cb43d3d6c468fa2c32dd4","sha512":"1d98802d64982bfd6c175c59b2f8309ac5746fc0516340031cd785e97b20e5227b8e7f4d2d1dfaf6e2208f6fcaf69874b3cbb0fd045ffe842bb1bb52a4a0647c","ssdeep":"192:GYu0yE1ZY8BFcL4iwjpj+IxZaPhJsc1NgdtE0:fd","tlshash":"d7e1993cd324b0fa214f6a2d530cd09cff2da9c1db4127f5b922d34e86d6a9992b590d","first_seen":"2023-12-05T13:38:27Z","last_seen":"2026-08-20T01:06:11.505483Z","times_seen":564,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5866.f164dd2a584ab0f493cf.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.870Z","timestamp":1787187916870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5866.f164dd2a584ab0f493cf.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-674\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjvsjD%2Bx5kMKbDsOGdxgJSwpq8sdkHFOw2esnvXa9MOonSNFCw4tWEzQAONKyt49Z1mNZ3nIVAvTfoAbmzJHSt6H%2B1foP4v98Mt7ZDChx2fQwble66sKrKnmMOrWInTWVhoS\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d206dafc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":1275,"mime_type":"text/css","magic":"ASCII text, with very long lines (1652), with no line terminators","md5":"7947cc37adcccdbbdcbfe681dafb34b0","sha1":"a62f294ed08a7add4698966607250ac2fc4c3f4e","sha256":"dff1c48bf17052d43b067d037a019c00cf873eec901488512f69faf5aaffd7b2","sha512":"edd9043dd8fc780bcb09fd9e2b3d7b63238537cdc8a5a3652f52ddb0feb2dcbbe5a48079fe2b410f1df84d53f7cd909fb89c47a50f4887899d2a7733a6849707","ssdeep":"","tlshash":"e43158c2bfd364bbf61342585245ac27737fa941432ae650acd132ec7382b81eb56385","first_seen":"2023-12-11T05:28:53Z","last_seen":"2026-08-20T01:06:11.541354Z","times_seen":555,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/9138.03b8fbcfabcae851949a.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.873Z","timestamp":1787187916873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /9138.03b8fbcfabcae851949a.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-37f\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTI5PG4F37zlmtzYdubFyf7PwV1AzDjzeL3vEfRjB%2BhuClRJ9nDsdTYLYtOuAD5gCKxfvqsrC019rH9KDDSLBxN%2BZPFxEofT4vZkmVDUW4elqDw0ef87VubPm%2BXen6B2Aq4q\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d207db3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":895,"size_decoded":1112,"mime_type":"text/css","magic":"ASCII text, with very long lines (895), with no line terminators","md5":"cc77fc666eb10b482bdb0f539547ba5c","sha1":"0543c5e4066ffba2357b31c00c284c5b92d934a0","sha256":"9e891a24bdd964d958b4b879b3cf87bbd89b075311c7b465884731d2b7f08f6a","sha512":"d5ae7aa473ce1386a2f77e58f46a50066e624e4facff6359e8c246d9b4f84f8cb15403639a7e90241ddf0a19e7976f12db63f6750f85f61dfff41b4d6f563e07","ssdeep":"","tlshash":"c3110431e690c91e7d57d82414c1e68e6279984d62d6b26e6726b36a8c9f7832333314","first_seen":"2023-06-09T06:28:17Z","last_seen":"2026-08-20T01:06:11.531723Z","times_seen":638,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/3914.d2b6c577f350629b6837.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.875Z","timestamp":1787187916875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /3914.d2b6c577f350629b6837.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-36ce\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elbMs%2F9HvsDEvpowQmdBlVs8TsrZzo7vLeaZmuqU7CMlcyuGXEKc5eadMmhkYGkuWMRgTiREz1G%2FwdA7FT4gpEkdOEbYRKPcjQZklbU8eNGSmOPFTZhMfyGbeHLfCbn0S73L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d207db5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14030,"size_decoded":3373,"mime_type":"text/css","magic":"ASCII text, with very long lines (14030), with no line terminators","md5":"89155186ddf193fec8d7ded547074086","sha1":"fce5ad8f4eea33fdfc58138cc5069be11ff220c1","sha256":"45aa99ef11e2ccc829d106e35af33027d130454db2d944c29c02ffaca4478f6c","sha512":"83870c45ea89f4f93c26b9a800e7ac308f29adcaebdc6cc7ac2ebf882a73710203253f1dcf99dbd921677aa5f24c978031276122c83a83db9dcc3f45a681e61f","ssdeep":"192:VLkh/ToV7JtTbeAKarBkucjY5Gl1R/9ruk6r8/DJEu4NhE0R0/9YvCLvtjvtvhvk:VTvGl1R/9ruk6r8d9OWJB1lKiW3","tlshash":"7f524405d7b6513e778b2079aa9ac1bc473d81e1ca1227bf743f6cd246c12ad2337629","first_seen":"2024-02-19T02:06:17Z","last_seen":"2026-08-20T01:06:11.520604Z","times_seen":535,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/index-CISBJgHL.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:15.383Z","timestamp":1787187915383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /index-CISBJgHL.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-10710\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rR%2BUwx5uugd89fUYupFNUgmracHBQk65O12hkCcxSj68l49OaFQnbmeuaxpaE4Ktyqv0XpPU295DkPu5lXSmd%2BZIuXpnJTV14ag1W7iEENYDIQidNE6nP6Rbq97Qln1%2FqUX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d172d2ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67344,"size_decoded":12414,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"deafc6a7c88900e14ef9a8af7c3a17cd","sha1":"023468e213694e7fcef6e8f473007bb8a335309c","sha256":"093a49d9b4ef7e26ced3379f2637d0eff6c8f16d94c6b717848c6d7288d810a3","sha512":"a3900002be5be159677b094a48fc121ef370b8fe066458ed6751cf75d9e225d79c35f93fbd26954b0e2c7a8fed3bc45c24505d6457b359209d0be6e73904758a","ssdeep":"1536:Aha/YRk96FUw6kZgjBSVaGzCr378VQZkt5FNCoP0:AhaAkwUEaGzCr378VQZkt5FfP0","tlshash":"41637419b919613e3c2791e883cc79ec611ef0c0de3b06b9be9a41252bd27f61dbb544","first_seen":"2025-07-14T19:04:10.662218Z","last_seen":"2026-08-20T01:06:11.506788Z","times_seen":15,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/index_1.html","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:15.387Z","timestamp":1787187915387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CDzhwAbAiwIqQK4Y4oNQzOS9YlrHxooPLMNFxsSP%2BqBwKpxhQXDlXs0WxLunsdYJ0O5IwDKFM4tnynk0TeDY69VSFJN4VmgkMhmQn9axVJXlBg8B4OH3Gfmu7s%2BJ3SRG6dt\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d172d30c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299712,"size_decoded":48286,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33781)","md5":"bfbcd6a9efba9de32569266a5356e078","sha1":"6cdc41f6d9cf2db3651630b18b813ccead00c29d","sha256":"381ec1e3f5ddb9abbfaf4d56f7c4eba2a273f16b51d7241aba85ef4b970915c9","sha512":"03d449e4bd1ed4e98bd1ecaff70681c6629af4b780f7cef3b6e13d2642ad34987878d6c2b329542a93f873927bdfba4dbfd107beeb2cfb5bf2947d447f176a96","ssdeep":"6144:asF/GyIwJz9XD28ZfXxy4lLQCAZ+SL1A0ytBTKWChNSYzc3Y:aIfXupkSL1CChNEY","tlshash":"3e54a56e9220b37c8c23cd18077c6e39611be506eca413de77f516b08bcbee91559e4a","first_seen":"2025-07-14T19:04:10.651477Z","last_seen":"2026-08-20T01:06:11.507646Z","times_seen":13,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6639.885b5577e3fb71ee2bea.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.833Z","timestamp":1787187916833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6639.885b5577e3fb71ee2bea.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-77f\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIHZIaGfkG4bJHLEJLemK7MJxWs2uBKgVk22Oz3OqmhxhviQzRuct1VSfuI7dFtSx7qgq5ufdfvHSAVEqIEDiwrs6oZVFLxv0Z%2Bd7zkfL4YY2Ag5FzrohbSzMeb%2Bu7auLNsc\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d203d94c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1919,"size_decoded":1286,"mime_type":"text/css","magic":"ASCII text, with very long lines (1919), with no line terminators","md5":"8b713c695b490a55f6623e71bdc2f446","sha1":"f1756ef05e29d48c6ed3a2feb2f46f1a63f3c3a3","sha256":"856f4663973867f854d4df66a79bbe412209c050f7e4612acfc02609ce740373","sha512":"c899ecf336eb46747c9ec601cd9977a69db0d5834b33ab2edfdedd0d00cfddcef0f380d1cd76d04b6331d4c9d70c4afda5fb610ee6ea3741321fedc7bdf9e5c9","ssdeep":"","tlshash":"634125006b54d9237212fe60ca5c8f3f22a4ae6fc09127e7f951762dcdc5a18ade6f04","first_seen":"2023-12-05T13:38:27Z","last_seen":"2026-08-20T01:06:11.523019Z","times_seen":561,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/4894.99d4c2794da9feef3c70.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.859Z","timestamp":1787187916859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /4894.99d4c2794da9feef3c70.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-3605\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVUSFh8BRlOVHaWtpccjYQGOlnWM%2FnrimvOO%2FmS1lAi3A3gitP%2BP3hBZ2k4GB5QWc8sBgG6FEc5ypxkf1%2BeC8Uf1Fn8hZYzjxYYogCQ59tcCUMGR7Y7NEY8CScPBmRBn2sJu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d205da7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13829,"size_decoded":2658,"mime_type":"text/css","magic":"ASCII text, with very long lines (13829), with no line terminators","md5":"ec4a5a624838a4a7cf8ec67cd5af6f7c","sha1":"1cbfdd8ecb7342d577525712e009f7a99a6e1f08","sha256":"2489d751f02926187e3f205fc5110ea5bb6120470816819fac0d1f97e45e788f","sha512":"34033c6a13a947336336098304f4e7cbdfc09eb120fab7df3b8cb2f6894401a213f9cf863a4091e1908ccc5a5f5a8df54cd7988676b8bc8ad42d7e42d53a80c1","ssdeep":"96:llPOi9SO4lxDYL7MhPALC6V61etmz0gTxIMilxRnnxfffJvKK9IiKcKdYKdxktKX:lAkXgTizlnpn4PNNc4PTULUfpd","tlshash":"6752afa176b3a132f657d33da41cb0f16f6a2d39a60a31cfb4a70a5f816c8517ed1a01","first_seen":"2024-02-19T02:06:17Z","last_seen":"2026-08-20T01:06:11.550068Z","times_seen":535,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_nav-main_nav-main.D5BAVvvr.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.629Z","timestamp":1787187915629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_nav-main_nav-main.D5BAVvvr.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-7a9\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xD7MzHkVNi7GO5wahvtnKpttWMzSuyAIBlpzJP%2Fw4uVN0NN2XO3E06kfijmNC%2BKdY7o3TSv73Jgysirh4V%2BIjUBJ7%2BhNCIRquvtNxwa15sLVNuO7koCPRt4mrPiIK1jbxGs9\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18ad3dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":1429,"mime_type":"text/css","magic":"ASCII text, with very long lines (1960)","md5":"6ed60e61e6f3cd2c6e8e0cffc9e69a6e","sha1":"b02543aa71cdc3db16f5d19d839893c3b3c8f4d1","sha256":"3197b76f36c3cebe9289bb060b44396408d804e470044c65d15f78a605f4b3a4","sha512":"125afde92eee50b02e0253851947de20fbf01b284491c6513d9d0c8711fc5e6f3a5ffc557793bc0bd5dcded21a67f61db03fd62a53231213b1a7e61a0628ebb3","ssdeep":"","tlshash":"7e419df95180992c4937badde3f57524803ce406ae2a4d9b77d483154beb6e30936d2c","first_seen":"2025-05-05T11:11:19.275482Z","last_seen":"2026-08-20T01:06:11.475067Z","times_seen":217,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/3842.8cf6b523fd5a5b6fb022.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.820Z","timestamp":1787187916820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /3842.8cf6b523fd5a5b6fb022.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-458\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TG6qMBfVQsw4DPd3GpX%2FQKYOvK5jl9mxddhsoX14lkycy5qrEabbZlpOPeMEnYJIgg0sDREGB6dnvArAfotfahfFjhZGg%2B71TZygS%2BwTEMh36gKCYPi9OqrHMlcNrBUUrcHD\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d201d8bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":1167,"mime_type":"text/css","magic":"ASCII text, with very long lines (1112), with no line terminators","md5":"cc67fd593fd9cb2cd5d7cf01110b3d52","sha1":"60754c5e06012f87ca6faa08f39c19c7ca070d33","sha256":"173c70d9afe4e02c3e3264c5ca948bd7c663c12e1ca0473b413cb4b869d60a0a","sha512":"95bb7a8a7503c5d9805c79eb7a821731aa739a48f3bf0b273c40cb636c965adbf2413962a9ce97f700cea7a40371f3aff635b569d76fa166ba5257841a877580","ssdeep":"","tlshash":"3c2107aa815505a171afca7bd364fab5013120a379c763fda1e07ef1da827ba0551504","first_seen":"2023-10-25T07:31:45Z","last_seen":"2026-08-20T01:06:11.508259Z","times_seen":611,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6106.f01163745d787b60c86c.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.836Z","timestamp":1787187916836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6106.f01163745d787b60c86c.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-140a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBzxjsMe4DF4D47dCJfn%2B5GmYCXe45HaTWYAdo%2FnXw9Dgi7iS%2BPpbe0tkwrP%2F8StOm5EIb%2FOftvMJjWyRyUOlAnf1quOOrJowv3MNXh848uX853WvTfJaW0mbOoVXrqaKQSs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d203d97c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5130,"size_decoded":1525,"mime_type":"text/css","magic":"ASCII text, with very long lines (5130), with no line terminators","md5":"d133406c76acf0c47aceb8cecdbc7663","sha1":"72eebece61190f18df4a0c0c05527ec734f23e89","sha256":"c684bf0bc471af89fadcf1641039b1568af4abe349e733fe07bbae8678678c2b","sha512":"982646fff1a7de9c2caf929bcdf683e85ad592194f5f6e81f3312bc593566ce0ad14097d94a972a48f9baba08d7c121762a54f4b61676f01754c1ba13ce9cef4","ssdeep":"96:/lGW98Lxyc/X6a22PSIMYlwsNQsrH9qwPBO52O52wXWapSjy1k6w:/lGWPaNMTRYH7skOkc8jiw","tlshash":"79b17fa9f1f2466e2b775029428d8ae4131f5ce3df1a37a9fc7662d000c76f9121d867","first_seen":"2024-02-25T08:27:04Z","last_seen":"2026-08-20T01:06:11.513992Z","times_seen":528,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/api/config","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winearndrops.xyz/","date":"2026-08-20T01:05:16.809Z","timestamp":1787187916809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winearndrops.xyz/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYuNQZD28EtlUFb8n4FKcv4tw2x5I69rAvMOaGUnRJX2TyhRGdTNvPuCVpJM7s21kaxJZUBYNdBXuXxRRquvkGlDEH%2BMinQU92bcfbvfNCvm4y3kFF%2BNgd7WYgSWaDgSWbkR\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d200d85c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":909,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"6194230d32bcaa6b4a8f6a90270d9be9","sha1":"9d9a043557024f3dd6ed3fe304ab7af441c0e529","sha256":"996c2e118defdacdabdb4de08bb97abf2cbf3824b1e442a5b43076e65bae30ea","sha512":"5b526583be74c917bd6c8e54056097b97319dcfe717ae48801bad590f771ed004ca7d47d7d038ddfbbc41f529ea10e7913b87d6edfa13dffda594c9617c35323","ssdeep":"","tlshash":"d5d0eb2839ac2c821e0b7536c81440e0a00b808080a11b862b29a2a0df9b0628184c06","first_seen":"2026-08-20T01:05:53.371006Z","last_seen":"2026-08-20T01:06:11.491976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5649.b60ed09c5ea8c55827d4.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.824Z","timestamp":1787187916824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5649.b60ed09c5ea8c55827d4.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-3ea\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5u3MxUSiEpc5Nm3YJpP%2BwXN1XJ6uy0qR3YX4pnj3r%2Flnv3jYQ8KDJa06eE2Fbhg%2FHWzo1Dm9Bm6QB2LkdJkTC5qaZfUuXnfG250IU3J5p8S%2B3yMma3%2FSWYB2XMHjrYqJZHk1\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d202d8dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":1191,"mime_type":"text/css","magic":"ASCII text, with very long lines (1002), with no line terminators","md5":"f74f78a8fbdc39871967ee26814188ec","sha1":"6bd41c1a302d42a04605c9fea20418786dd2907d","sha256":"e64c1a4f7f4d616c33476e47dc7d71be67689c3e70a186b0ea3fd34caead2ccc","sha512":"456d0c786034861a5a3f9bba1d2c189487d9208342a381812b55f0c3f8a457f6a5006766681d0b4ab17bfce98b29af8ca5f462ef9ebad75842b81705b52da9af","ssdeep":"","tlshash":"0c11c215a11035197f97e138e696de8812bf2480d4f2177eb00d607586daffe1611c34","first_seen":"2023-04-19T23:43:30Z","last_seen":"2026-08-20T01:06:11.50039Z","times_seen":678,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/524.ef662c4bc3e57dd91171.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.865Z","timestamp":1787187916865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /524.ef662c4bc3e57dd91171.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-155\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yA%2FTHZmS68%2BjVPFNyrHHS8tRSNiwK6hVh04IWbEkzUj3FC0S9Cs7%2FUF%2FoHSWtTFPE%2BVDiFo5nkw%2FSXh56hoAZrTLE42hJIeV2rq16%2FZivp%2BbUAxF3e0Zs8cgsUV6LEUXQNz\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d206dabc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":930,"mime_type":"text/css","magic":"ASCII text, with very long lines (341), with no line terminators","md5":"4734af2d55860596ab37204f93311772","sha1":"19c31fa7968017f86bc19bdf8f76c9cc56c1a19f","sha256":"c3caa0fcc7cf03bf8c4ed5e72f0654786d5bc5201b3373fc51361f671c12357f","sha512":"d5e4a27ae5cc0b0120c8fcbd12aa94a5978ecbe6db85e1981121834a179b2ec687f6f6393147ffe36145527d44fc8c08dd2de9eed9715f09ef263301d8ad5735","ssdeep":"","tlshash":"efe020d2c7343395db19d5715f4973c432647295442d5f1df0a5a9d9c0ce848205e55f","first_seen":"2023-10-17T09:01:50Z","last_seen":"2026-08-20T01:06:11.497276Z","times_seen":550,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_dex-screener-table_dex-screener-table.DMl2HVZb.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.647Z","timestamp":1787187915647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_dex-screener-table_dex-screener-table.DMl2HVZb.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-d6\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0YV4q2UUZIjlMl%2F2cXxd%2FbaNVbie4ULuLw3cWjOiHP04woBMI3DUG5%2Fj0%2FiMLkmL%2F0bZ36n1JRVvaxVOCqTC4EpDgyhV5XILyHc3Y4OuKJhYcNax2JuUY9GZseyGr8d3NJC\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18cd48c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":848,"mime_type":"text/css","magic":"ASCII text","md5":"8698e6772d74e227f4d243a7edde1923","sha1":"5eddd79fef88b53387ab83ef0d6666d958cd0de7","sha256":"f42153e9281ccd6ac659bc476b99617dc7d9870cf4522998ef24a09c46e54064","sha512":"734d1d2df9b98078909c961540cf4f424803ff88681da334128e232bfa98ae123c2df54a0282d327e55102812b48d4d414a8b4f448cfd8147f155e0b5df62b8d","ssdeep":"","tlshash":"22d0a754e390d29f6c02d844232e48b4940d1c011c1313dbf3a891e00dc3df31288e26","first_seen":"2025-02-27T03:22:03.925781Z","last_seen":"2026-08-20T01:06:11.550948Z","times_seen":497,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6150.bda60280b05cea478076.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.816Z","timestamp":1787187916816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6150.bda60280b05cea478076.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVKxOn395nfMFiXrlmqWmqEL7sYZm9VW28bi9kZVtq6SKBLD%2BSzWmIywMmCUGsBg%2BmHe9NyLVjwULFIZkU8bGADB%2FsdeFKA7CBS3AA1ikexZC9Tx%2FqmL6SAleCudxaGlO%2B%2F6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d201d86c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":729,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T04:30:40.665703Z","times_seen":17984494,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/8056.1f54f717d8e522c55c89.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.825Z","timestamp":1787187916825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /8056.1f54f717d8e522c55c89.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-2486\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kT7XTnPtP1414Z4xRatNyArmI%2B%2FE6RqypOMd5dCn5F3p9iLLNvfxM2sCd%2FnSzMqydfV8UCNAY3Se7mTPSY%2FB1Lc1dya744nXcYkFdIkKSBHYzkYQUi1PsJN6prEGFO1NmuLU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d202d8ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9350,"size_decoded":1753,"mime_type":"text/css","magic":"ASCII text, with very long lines (9350), with no line terminators","md5":"cea3dc89719be4a627f4190fcb3b97bf","sha1":"c7cd49283029634648153e806a9ff70599957701","sha256":"1f5d21fd99703f8cdd8185fa980013edcf140642c5e8d38805f1eab208791a44","sha512":"875104c4e70ee4160f1c23958e6b9c9737d3aa6727ca6df411767526f6f01837cc19a103496ce0d1e13674abc6804dba5991803d7199b01a695cd69496451f95","ssdeep":"192:HTOmVnaRKu9HutoHT373xa9UvQKuJPvZKuoFPvHyFovvwyuX8xkjKuk0iBx5KuaJ:zOO2/vGy9IRv","tlshash":"f9125a85f1aed7baa60b40394dcab2945b0b2af0dc9572f57c35ecf141d72c412c660b","first_seen":"2023-08-25T21:41:32Z","last_seen":"2026-08-20T01:06:11.517942Z","times_seen":562,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/4102.4abd8542fa3aa3e7fd5d.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.857Z","timestamp":1787187916857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /4102.4abd8542fa3aa3e7fd5d.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-8d76\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYTY4%2Bmde6mdLwJSDTkir91ZMx0yDi6UEFKpTbJyrOK21qDAt6ftuTW%2BfE4iFciSQ41XKvZxpcNqVGwYsQe7L1zBp9M5rrSV%2Fiw58gtduLoLeCTDs9nGi%2FeBWw40RZsSousR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d205da6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36214,"size_decoded":5924,"mime_type":"text/css","magic":"ASCII text, with very long lines (36214), with no line terminators","md5":"6607f19eac94b100db84d4324485fb84","sha1":"79a48ee16598bf4b608c412c01751a6d4f891517","sha256":"4d1a2d76ba6e6e850cef2ddeb7da0c787a64b1a1c074edb12de8f06717970599","sha512":"0ad08e9a33bae87628b687ac4d3f7a46ac31e412803c1bf5f9b753987063bd62ceda7ac1003fb6a190aac29d380c165651c43681a355353213440fc96d67486d","ssdeep":"384:kMVNhp7lxxOPanstYVlnXfpm7WtXddi9Ii800xCZMPE7i7:kMThll+YVY5CiB0xoi7","tlshash":"4af2f04383d5262b230f83bf98e65e1c9b295544c09f79edd0b31b9b46c61c1ab72d39","first_seen":"2024-02-19T02:06:17Z","last_seen":"2026-08-20T01:06:11.539587Z","times_seen":537,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/1803.4653bb65d2b0d594d6af.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.866Z","timestamp":1787187916866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /1803.4653bb65d2b0d594d6af.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-52bd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXVa9lBouLQcroijQnVk0gqj13lXNpiNq6RHHcmVfmnnGTkrdw6IOvpRF1Oz1UEfZ9peedAp4XRXoCYduYKUiJ9vlxvDxP28AkRxHOxnxzGR2MYzvUmtB6siQ2bmNkjyUpJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d206dacc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21181,"size_decoded":4629,"mime_type":"text/css","magic":"ASCII text, with very long lines (21181), with no line terminators","md5":"1ef334b7d21b3fb660d6e7dfdaa177f5","sha1":"6b0ba11557ccb17bf0ae9df6eabff6c9211ffd5e","sha256":"33dc78256d561b6fb5133aa28c161c6eff909e26ebf158d0b5d9bad28dd2c830","sha512":"0330e09ea590c9bb549dc30cb32de4e8538a75aa06918052c20536d1ee77b84a12e24c83f0a668916913075dd3e8a64a91626278b2af214e41b8bc3a79ccb375","ssdeep":"384:rFk/IdLykZVTyOB8Iwf9t+1l6MDo6MSyA:rFII4kryOBn","tlshash":"8d924484eb21617e361f9224878996d8e73a7892db0172bdfc7510c845cebcda3b1e1d","first_seen":"2024-02-19T02:06:16Z","last_seen":"2026-08-20T01:06:11.484345Z","times_seen":530,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/3980.b2ff45a2d8bb6a131d7c.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.874Z","timestamp":1787187916874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /3980.b2ff45a2d8bb6a131d7c.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: W/\"6876d859-1034\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2F5ZLOc7haLgV4Ko4HY0Yt0TiKlhBvIyAdIvcvEHr%2FAwuVR8V%2Fop%2FeYyjS7KI5sDDtmwJA3bNd0MAk4ipRWTbEhHfUks7tDNF2Uc6%2BHHu9F9lPHgrxkjd2PwuLIjgFasDRLx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d207db4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4148,"size_decoded":1756,"mime_type":"text/css","magic":"ASCII text, with very long lines (4148), with no line terminators","md5":"f9e9077bcac8f7d53e6931a5041b2a1d","sha1":"478bf8c579114ed9e565157a65fb65c09c88f198","sha256":"41ac36d65b6a3a8e5e4176eb169b714a6f49b04e4431974bd815f57a50dd904f","sha512":"9990b1717b859d4945bd9c0e587455e6e580e1e2571423b88f317df2436042fb72c21811e3d29a1a36db58cf15578e2e123db1c5ecfd7a2e5ba6c3be33a585cd","ssdeep":"96:E9K2MR+rNK2sKNvKShyIKj6+KKNKYkxK2NpK2lIFRT+KYxJLKXK2KYMgK2NSK2rr:hJR+444dj6+h0CPKI9gW6lxui","tlshash":"37812048da10f22e361f953e8b5ec6dd92b16491d4043ffcf4e2b2a486c5bc93aa590d","first_seen":"2024-02-29T05:39:57Z","last_seen":"2026-08-20T01:06:11.502051Z","times_seen":543,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/src_presentation_components_change-percentage_change-percentage.De5TmJFb.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:15.632Z","timestamp":1787187915632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /src_presentation_components_change-percentage_change-percentage.De5TmJFb.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-27c\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEt1V47gPf5kGhKpScKN3CS3g7W2AUancB%2FZUuSLdjzus664B5Dey%2BFsqgWCB1vbX5CpP1Z7hNa29Vm%2F9hQDIDUtxGKWaWKxAgsloWxX3esF8uqVRssxjif3ItgsfIg6p8vZ\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d18bd3ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":870,"mime_type":"text/css","magic":"ASCII text, with very long lines (635)","md5":"3fe1bafd664c6a8f7843b59325aad151","sha1":"bbb6f910091d7ae1be2306d887e345f49f69f9a4","sha256":"ac44cbbf79906cbb7681b0c881c34460329ad011b0672ac420ff486d374fd1fd","sha512":"ce8e012efd29cce8838fd8b5504f70c712acdb7d59079ec8f1e6527da760a24e7cf773efe4991650eb7482e5fe96c04187a5d0a392fddea586f94bfc8d17b822","ssdeep":"","tlshash":"bff0de64c510ca6b1d52915923a58f6b121de984ad9e03afa3f4c8fb4d876e230e8c51","first_seen":"2025-01-27T05:58:36.625721Z","last_seen":"2026-08-20T01:06:11.517121Z","times_seen":471,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5M7FgwEPZnZxYAxYYgNKu6zA8Vodf2QRuhzxQN8Spump.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:16.025Z","timestamp":1787187916025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5M7FgwEPZnZxYAxYYgNKu6zA8Vodf2QRuhzxQN8Spump.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-19a6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z82w8y%2FCgpUP%2FgCem0w9b8g2zhEbFdK912kFjkMk5OCDCoL8ds82SALWfJB5yKOE64eIvnrw5Fjg1TH9UouUGuVAJ%2BjMFR0XZwEMrAL%2BMgjOw9T0sE9MXOI3a4tp4g5tkIV9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d1b2d57c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6566,"size_decoded":7295,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8f938b1ec57ae63c330ebd87c26f1ab","sha1":"db035a1a22dd61b0de06555e988d639bf1ac9e9f","sha256":"483e33db4c806d84a256e291cfbde824bf66b3afe7403d7820a4b67f5f6e7c97","sha512":"34a8e850e28dbbfa68c2a49243f3ab786322648742bec28989dd88f8b22d69875e7eb2dcdc46382ea59a042652610f540aeddc906167ae3f5654ffc550fb7dd0","ssdeep":"96:/Fhm7A8971OiuvHnqtRpzisCrtEZN5OkBW75NXGOeZuLys6NBWMmNLAa9pTz6Bmq:vmHGcLw6417fHebs6NrMAITzoN6+SQ","tlshash":"fcd1a023c2dfd786169329884278160769c7da07a563b41f3d107f76e17b792f0a8a0a","first_seen":"2025-07-14T19:04:10.6354Z","last_seen":"2026-08-20T01:06:11.478531Z","times_seen":13,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/pumpfun.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winearndrops.xyz/index_1.html","date":"2026-08-20T01:05:16.030Z","timestamp":1787187916030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /pumpfun.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-732\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTg%2Bfemg%2FSSY18PTcYOtdc9KWQDKegQ%2B226B5Bu%2B%2FcAyQqra%2BPPN%2BD8ESxLWizw1jrZJcdch4oNkFxsWvtBfwcfFAjBJQ3ADOkSpla0L7jj816IkSCShKcZwIPofbuK6EqUh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d1b2d5bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1842,"size_decoded":2576,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"8fb1fd2ead7995e9628e1201c9f832a0","sha1":"87fb0e9cda83e2e7ea8c16955dee567a2d3421b8","sha256":"66667de36482bde3adc77565c8116c65cc2b3113577387d32eff9801ddc68d46","sha512":"98d00d9d8886bcb8a7ee826234de03c010e01fcb766792ef637749ed5d3b35da2283c058d96ed7e1d10f68d2c412339709477e7d8cf9ce09ba917a490e2f620f","ssdeep":"","tlshash":"4931e9ae3d5f3009de6cd1b1e37f6920916023224f2a667356f23ae037dc6479b12813","first_seen":"2025-07-14T19:04:10.659805Z","last_seen":"2026-08-20T01:06:11.526376Z","times_seen":45,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/6.362fa6a7ab1f3e3b06c4.css","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.822Z","timestamp":1787187916822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /6.362fa6a7ab1f3e3b06c4.css HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6876d859-ff\"\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FoNUqtqxd6PuXGFN9zf1OdGZbet7oj6O0i6zGaEXdlbB44n9%2BlIF%2FSpcpI%2FLbz6WQrq90AWIqQNdPeQ8yYTipp%2FTQmJnXmF8%2BWZ%2FOPNAOePYZGGBxeen%2B3XOeDT6Vj%2BFpNdv\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2dd7d202d8cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":912,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"9239f1932f0463fda9d174ac7e9744e2","sha1":"dd115c2037f650f90153fbe4b49a85d04c1daf3c","sha256":"80500344b5c340a44d864b52eaf3964077854d857f4d5ac5ed9b660e11fa18c9","sha512":"7c73e7c1c4ec896431962c3e6d5b09f2ce5c652b1baae7c69eebf914b56b1cc669d1c2a0c71233571ef2b39955c7b360288904ee9b8d41e406224a2690c3397a","ssdeep":"","tlshash":"c8d095016534513ee447453d6ec20337c874c601d5e33adbe563f21610f62150bb570d","first_seen":"2023-04-14T11:23:38Z","last_seen":"2026-08-20T01:06:11.504285Z","times_seen":664,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winearndrops.xyz/5M7FgwEPZnZxYAxYYgNKu6zA8Vodf2QRuhzxQN8Spump-1.png","fqdn":"winearndrops.xyz","domain":"winearndrops.xyz","tld":"xyz"},"ip":{"addr":"104.21.71.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winearndrops.xyz/index_2.html","date":"2026-08-20T01:05:16.894Z","timestamp":1787187916894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winearndrops.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 23:19:17 GMT","end":"Wed, 18 Nov 2026 00:17:00 GMT"},"fingerprint":{"sha1":"F1:00:F3:AF:D0:84:DF:93:FC:6A:5C:91:C1:15:DC:5C:FA:64:3B:00","sha256":"D3:6E:3C:87:38:1A:01:25:DA:62:79:41:8E:48:E7:30:A0:F2:10:6B:31:B8:8C:51:5D:14:8E:B6:51:75:94:5C"}}},"request":{"raw":"GET /5M7FgwEPZnZxYAxYYgNKu6zA8Vodf2QRuhzxQN8Spump-1.png HTTP/1.1\r\nHost: winearndrops.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winearndrops.xyz/index_2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 20 Aug 2026 01:05:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 15 Jul 2025 22:38:17 GMT\r\netag: \"6876d859-526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBV3EkZBHSQA4IPWQlgMSWuYLB%2FimyONlpcubzT%2FjFhlEHuLvF3dof2GYz2r85RYXyZD9tRZFPgb7XIQMlwVefDqZAeuqCudFQKRfbAEdwvw5VcEpTTeBMNDJk9HewD3m49%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dd7d209db6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1318\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":2044,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37ef43a38ab865d0ea82ec3dc14be9bb","sha1":"543037c2084e360a688d0f9af3b604aec1b5247e","sha256":"1556d623d143aaa0d261d67343f943c1d82e2fe90b065f93c0d0ba643917e462","sha512":"f1a7c4d27eb0fefc14ebf0537e7966aa9487b8ae4466e823db747d95c2989f7218a8318a6a1cdd957bad94d4dabe2546adb1ad01ab29fe19c1b192aadeae80e0","ssdeep":"","tlshash":"7721fb82612d46c15b2f64e5f9d7577b76273e7276632001982858d73c61b02037d19a","first_seen":"2025-07-14T19:04:10.645447Z","last_seen":"2026-08-20T01:06:11.47756Z","times_seen":13,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"winearndrops.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}