{"report_id":"6d0e3e93-b0a1-4095-9874-1e483a9dec3b","version":0,"status":"done","tags":[],"date":"2026-10-04T05:23:00Z","url":{"schema":"http","addr":"winonevip.cc/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"title":"WINONEVIP | Play at the best online casino based on Blockchain","dom":{"size":45525,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45524), with no line terminators","md5":"1bffbdb9d8c61f717267eeee4def7c0f","sha1":"763597ade8a90946ae264e5bc022772813f4eab0","sha256":"cf895aff4f393f22bb069c84f87f1bb8fc3331c02afccdb3e48481d421a0bca1","sha512":"c759bbbbeda5e7bf3ca348c4ce026e1d95f0b79422576a71f96535ee3f95e0758e21a6a79fcf5b245b1d129ee7ccdc518730f7a3614bcb8d64beab959a93edf1","ssdeep":"768:qOVDvWLITKNnIKTjeKNLV8KTjeKN1vh0v/jNv9BU+/v64vLvf+Kp1yLMbYMIkoWb:q6DvWqKNnIKTjeKNZ8KTjeKNT43KQ+KL","tlshash":"ea13f975a04cd896a4439f91d63b7e2525eb50bece0ac9b882fcca5963c3cfd5c61c84","dom_hash":"domhash88ed3d357724f8956f27bef51d299aa4","first_seen":"2026-10-04T05:23:06.864032Z","last_seen":"2026-10-04T05:23:06.864032Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winonevip.cc/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T05:23:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winonevip.cc","ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-21","domain_rank":0,"first_seen":"2026-10-04T05:21:06.511875Z","last_seen":"2026-10-04T05:21:06.511875Z","alert_count":62,"request_count":62,"received_data":1566260,"sent_data":30539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-10-04T08:02:04.792085Z","times_seen":107873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53c62f567df8a88881c1d8eea64a8756","sha1":"eccc7a5ae448c86795a3b8786318dac7a2148016","sha256":"f811bc6907e4ebb75de78be9891213a23a20b13898a07693cade6576596497b0","sha512":"c0696986ca77329f53a1d6bd8cfa738f36804de6af132afd500153e2d3607eb08ef4b76d1d7da7ba537137ec66f6b79ea38d76841c7d7f5b62d5a0aab2264b50","ssdeep":"","tlshash":"4ff09e5cfc06fcaa5528692f142b5f58e09cda6d53d488ec6798cc97c245c7e038c9c5","size":460,"data":"","first_seen":"2025-12-07T15:18:05.837941Z","last_seen":"2026-10-04T05:23:06.928319Z","times_seen":1147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3da042ad36b626e7bbfa53c6255a6f8","sha1":"8686ff9c48f186266306c15cbc93c60e1ea0ae97","sha256":"ab99db30906d2f7b897e5161ddfecae3f823356dbb3a2948ad4a04f8073733fa","sha512":"555350dd13eba0832b6f9d6bb79f66a211d35aabe7d153dedb2c8e48bb2d0d9ff1b52aa246f47efb4728bf11416c9963d13a0d71c1f70e2291122076d7ced610","ssdeep":"","tlshash":"c401f19ef150e841a8e3df06657b1f3a4998cc330238f448a53dca7a1301eba9768840","size":745,"data":"","first_seen":"2026-10-04T05:21:12.507118Z","last_seen":"2026-10-04T05:23:06.933975Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"639fbf493b88db49452019bddd0c515d","sha1":"3b01481f154214026b375f09bfbe1ed064ee3e75","sha256":"4fcfb7fb471368dbbe8e4fba7acbc65188842d45cbc82a9c700a0ae2212f77fe","sha512":"268510ac4ecf7aac89b4efafe74fa4711bb638330345dbc17f39e245819e0609da341e0e196242a31db3a6b49773f9937a08aed944b8beb237ddbb2164ebbd45","ssdeep":"48:LZrWt+ZyyAx6zA4iA8pRqKsnbn5ncnbnWnXnnnFnDnsrezGBnqPFmuejBnqk5yLi:LRWIUB2tnkurV+rc3nBz0nniktkfEaW","tlshash":"b7815a2e5406ce4aec6cbd66423f6c3164dd4a7b4b91def8c18cce5581074ba3aeacd1","size":4187,"data":"","first_seen":"2026-10-04T05:21:12.508442Z","last_seen":"2026-10-04T05:23:06.934711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f58df2065ea48c382cdcc4738cc6ca6f","sha1":"b07611235849884e24c318f9aa34507a4449cafa","sha256":"63737b15418443eeebdda76f63425e9a98ac2139d6ef3e96b112f65bacc7f3ee","sha512":"f5ca5e475a074ddce59b35ac3a127a4aa51b5c103b5b4e4d7af653a4bfd60e17a86c68d17f08cae3510e543051d043aa4eb19297abe60e990676968d628ba9fc","ssdeep":"","tlshash":"8601ddb39c01fd0ec782df3d0c7e2c6920cd8679174a984ae8c4ca592992a385af1ec0","size":662,"data":"","first_seen":"2026-10-04T05:21:12.509721Z","last_seen":"2026-10-04T05:23:06.935703Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f80739186764d475f7d6e50e777c69af","sha1":"055180da2ec90155b9476a56d1094d6195f9ebc7","sha256":"6ad9de3484b9c874d8ea5117352a8437158ad4c7194a029c8293a9cee3fcb623","sha512":"19a3ac1d7f849d13c06b2496ec0665ee6a2a389ed1e438c8a20e8219c6736e6e10de6198152763182f44657b588a900c3116a4daec4d37f1c88d7d4df8c492ab","ssdeep":"","tlshash":"fef0301eb101e842acf6dd0a543f1f238498d977063ce56c965dca7b45029be5718846","size":450,"data":"","first_seen":"2026-10-04T05:21:12.510862Z","last_seen":"2026-10-04T05:23:06.936753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/layout-3c7cba712a5934ca.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e348b3c6a588862cc4b2d9dce85ff49","sha1":"0186fb2c2694321ce4a782ae7be616bbb87fc28c","sha256":"630d70176fb1c5010d9f44da40779fad365518af7499dabf8a8877a9e7e9c84e","sha512":"baa3d55d48d23e39576d83110cdef809d1b2d768b3045fe465ac8316cb72d03c86cb611b75199a1c8db756ecc73d980345c1f38862c439896ebb8e9bbee12631","ssdeep":"","tlshash":"3151655db2c9b4ba16f32164547fc507e0362776280dd495a235fcd12d30aedb122eec","size":2984,"data":"","first_seen":"2026-10-04T05:21:12.432311Z","last_seen":"2026-10-04T05:23:06.90323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/8003-35d6c4e938d60f65.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8014900ea0b06de9aba6c034a95c2e68","sha1":"f5f9791bc97c1a2973734e6999868eb15e2096e1","sha256":"bb2ba96a789f1f0c6144a6d6ddba4a09c139b4060a1c9e97af56538d29415c2d","sha512":"cfa275c652a59e72983c88b3a934681c6f29ffc87c4c99ce4a55137b1f5b0cd6f011d8ea93cecdca39f82ef3f2049fdebb3465a52d80ac6887dbf2ea295ede80","ssdeep":"192:cQkUmrphg1A1ZfGVYOw/39aS2wBgrn0z9bjcjF64KGUZbczUdj:tm+EBGVo3kSicbyp9a","tlshash":"ede1e9b2b7d4fd35135a44d484378247b6542e37601e7080d3fa8cea62b8dca85e2f8d","size":7119,"data":"","first_seen":"2025-03-19T10:41:28.915816Z","last_seen":"2026-10-04T05:23:06.918473Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/(landing)/page-c140914511785ab3.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef3278ef467378e1fbe5168193e36f00","sha1":"88dc684e774a9c1a8e555214034d62c7fdfe0604","sha256":"34ed9a9e77922fbc1668bfa351b68361b474a46f0db5879886d1314090e6250b","sha512":"9addfadbeb2739354edeb2610ad37349fc70acf2b2abd7055060435cd1ee24c964a3ace5620177afb73a4de0518122883583c96c9a05e33ed7cc2f6ed29f23e5","ssdeep":"384:F05D8yjHisHBOham1LobXv5LD5nP1vqLzxtJbZOr:HyjHi+CFoXv5LDp1vq5tZZOr","tlshash":"66928319e05de6e8ba720c50962fc449722e365ccf09ccf4f9bca8011a5e4d87b67bd9","size":19559,"data":"","first_seen":"2026-10-04T05:21:12.454384Z","last_seen":"2026-10-04T05:23:06.873119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/twq.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-10-04T07:33:29.006416Z","times_seen":27511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/webpack-18072e7e4d76ae57.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b866cdb7f1d26bb46ea645272d2134","sha1":"acf4d81ac086d56753072e528a5d1f1abb88d07f","sha256":"1930228456f99ec3fb1912f148a63538c6fc7b91a76b3cf47b6eded8f57364c1","sha512":"69813733c0ec504af1083854aa0185da4f9663f1403479a3b8c02bf779b37dab2061875a368937e66eee1c9776a34d917ada677769d403a839ac848342b0b74a","ssdeep":"96:kMyYE1q9WlR3lMka20VGL6VLW56l2WRrlwrLDYyM:kz1mWlNfajUmYyR8hM","tlshash":"6a81a7de72a1f4b91782a4a1443f9146f13f28f2281ee4a0da25e4f5fc7554d8323fa9","size":4156,"data":"","first_seen":"2026-03-03T16:15:40.656942Z","last_seen":"2026-10-04T05:23:06.895678Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/2117-603ce227f12237bb.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd99d7878c7e8888b6ab24e40ab69fc5","sha1":"7b304634632723e583517d33e34998346eab166d","sha256":"ece772926ce274f6d31508d891ec5fe44697a6e67273a5c359b17a44dc3fa2bf","sha512":"19be4f0c4789e62bb9d6245b21aaf21f87346f84abda7d1ab8661280dd9e6ab3c57e5fbe07b427e4cf03a6c00b14c154ad9f649989c1d16d35db1dd17bbdabec","ssdeep":"768:PY9P55e7wbSlPYtVDl//d9icrEAKH1ag8xxqKjj3fOpDKdlr/Na8MQr93UsGoROz:Cgw2lMWc3mY5jFdl/UPsibn2kJ51oCv7","tlshash":"05c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124467,"data":"","first_seen":"2026-03-03T16:15:40.652661Z","last_seen":"2026-10-04T05:23:06.900182Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e6693b6b8e2ae5167ce7ceb21dd431","sha1":"625b83e4cdbc0bc71ca90f7de6633000d5908f96","sha256":"a87677f28d0d640a628d81e90ec37a86c6674c1c656277318f17b14c9542d045","sha512":"4a219d7524f60f77557dd49d61838d092f7517e9b0984cf2860a9638608cf848c381d9988dad5129a63b4eadf274941a786cbc08d3052715407962a6e131aead","ssdeep":"1536:tVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:lzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"b4f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172835,"data":"","first_seen":"2025-01-19T23:51:52.179106Z","last_seen":"2026-10-04T08:02:04.764185Z","times_seen":4556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fbq.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-10-04T07:33:28.99209Z","times_seen":27522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/not-found-c6f495871cd4d31f.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb59f39552e209c76a7d649009032b57","sha1":"5725326a1b2c77ba9a76c9e7287e891473aaada5","sha256":"eaea74d0499f8b1b2c36f7ecd1378cd10563b34045086447956d3acdcf770297","sha512":"7a15783703be8cdac8df8d7a6cfd077ae4bccc03d57f62ceab188b41900d97394bca6a436c78e0f5ce8e18f3461db07fe172b112802cbc05fb1e29b784cae830","ssdeep":"","tlshash":"f201520531c176d8b5136cfc517f9809316b2698408e44b2d8b6eca12d222ccba43fcc","size":827,"data":"","first_seen":"2026-10-04T05:21:12.42487Z","last_seen":"2026-10-04T05:23:06.915763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/1651-82e1e744355e48d1.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40ac3263cb099264944011545380bc2d","sha1":"4987655d55aefdd9f6505eac8ce3af02abf0da19","sha256":"bcfa96af03f753fa7da9c21379ce4dfdc1355c70269b6eef3081081c7831ac5d","sha512":"d9e4a42e99ebe60251beede2f57a031f55be28390b32aaac658f8ec2b77e996ab817b20b57e129924c9bbe99f72ca46a24e7756d4c0a224606dd90a10a2d4f48","ssdeep":"384:XiEoLx1+W2o2mQvNNLkVohPc7W9fDepafM3vqLuNV2VGgL9PpX8FNiEzi4:Xafb2mGNSVohPcSkp8M3vqLuNV2VGgLM","tlshash":"e352b669e3f897c0da7d4b6451eba05fb27f3798ab028c94e6685c14a4a54dd3b00fc2","size":13866,"data":"","first_seen":"2026-10-04T05:21:12.465495Z","last_seen":"2026-10-04T05:23:06.921724Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/2771-988eaaa05272970e.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdadb203444e1071d192ca1ed0f96120","sha1":"c3ebf75022e9fc39916c316b38bd8ee45949b21d","sha256":"72a69f0e2a72941e227d3f5cc3106141081d3d9cbb2219809561dc24d1fdf890","sha512":"b9d067750c3752a2004d8da9df6d6a95f6fc0b96e66f9f51e35efc39f58307b42371e50a02347d864cef7032da1a74a676b85c62a7768bd06451895c9d10a524","ssdeep":"768:YrFeRJM1vTuWwywyviwZvr3AAhce2hEez8KN40nLgfNEbk5a29aoLpsgYXzFM9Yv:9uSWXP2hgKN4cIrz9UC1Ota+5scz","tlshash":"1e2308ddb3a9b9d0f4069b94ab6f6818713f22fd9f05c460a6bcac1061144cc7b4afc9","size":49808,"data":"","first_seen":"2026-10-04T05:21:12.485968Z","last_seen":"2026-10-04T05:23:06.870591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/ttq.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","size":1006,"data":"","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-10-04T07:33:29.021635Z","times_seen":1220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5367f9275c124ff441c9f2dda2be9a","sha1":"56f8efc747406730e680b5583b239301797b3f64","sha256":"0d653de16d82ad5663b217d4f67165a5b6d771a51a38c219689792e8566c0eb8","sha512":"c2a82168a520244bbb60a03ab8b4fbf64319ec5f6d01fbe5adc9965af8db74b0f0e0d6418e212934a9f667317e916f879cf9f096bb684d404258653708db6172","ssdeep":"","tlshash":"c1d0a78939817d1d2a136564d977086136f704a8789bbcc166209d911c333ac83a1c8c","size":226,"data":"","first_seen":"2025-03-19T10:41:28.874854Z","last_seen":"2026-10-04T05:23:06.866538Z","times_seen":1921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/main-app-df523c8931f70c0a.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"780f1f062143f470ccc751e8e9d0ba05","sha1":"c9deba27d87d3e1b411b741a1d7249479fe500b5","sha256":"82b916c2ff6e9ac8cdc115f596700aff44c67c4cb3fcae2c6dad80a6baab40fa","sha512":"77205548712b78834d6277e82f573ab652162e8daee458234ee877477cb98410450a7465d681c859ae71bddc4a2d40249260d3a9c8f7f34a7e9eb5010279aaf4","ssdeep":"","tlshash":"a8f0129a2a4c742f2913ad24fdd36c2e256e916028a759501a14ddb12c736ac93f1c7d","size":464,"data":"","first_seen":"2025-01-31T10:41:20.167782Z","last_seen":"2026-10-04T05:23:06.917315Z","times_seen":1937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/global-error-8b742238adb6a5a3.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0093b22be6609d18ff430e7880188de","sha1":"18d4a05eea23af4ae3e18662ee7728912fe7b1d1","sha256":"07604cc56cea07e226aec7b1cd3bfdb6df907ca4288a50f18ac864db849ecdec","sha512":"785673a17a523c7eac0ae9edd5b401d61c4b11ddf109a4d6b9249dce7e2f5b3dff0da38852c2365245c3e2f4260ab01936f589cff05b243bed92c92d49a1c1a9","ssdeep":"","tlshash":"7d21118db0807994665ba8de916f940d729b259d100d2ca2d9725cb11c663dc7903fcd","size":1390,"data":"","first_seen":"2025-10-11T08:19:51.900596Z","last_seen":"2026-10-04T05:23:06.869226Z","times_seen":1475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/3635-c03bbd027c37da93.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bfd3c43b0591fe23f76de6198093a0f","sha1":"be72f5c8b3636e440ddf1d1906bec429efbfd045","sha256":"bc911a058a44d2c054e70930b094a44491fedd6e799b20d70be4dd4a6e066e38","sha512":"3671773055663d50e2f99905e08c8cc942a8070d55944f8e63a29def847608129e854e1897c34de7cc6a11a8e8e81dbed0e39234f8eb1d457d15a87e65d0243b","ssdeep":"192:wHvKgrF0IfA/SoG1UR/CICsdnzGvzjDY4BmdtqcGOJMxLqrdyz:s3CZx2zMdwOJMxLP","tlshash":"0f22b655b265e4ee0ba7d01c897fa246e21d4f1de8c8403a8f1d67503072d9ef3a0bad","size":10433,"data":"","first_seen":"2026-10-04T05:21:12.45095Z","last_seen":"2026-10-04T05:23:06.891428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/5353-d8888e459d0d123e.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc61d7ef60504a2f5fef5b43fd53e2ae","sha1":"80bbd7890ab251264753feb976d58bf471bf7217","sha256":"457fb993e9c8544b646cc0b8f599cc88f5a63336c700d17da2cda5cd79a5968f","sha512":"e615c715ebce5a84cefa043a47818a84d9bbfda95716b581dff806441665ae419271190ad835faf79805c31287ec3a083c0df5357f1c32806846eff2f5d63a84","ssdeep":"384:tpWv91E0kbfrT42FPpXAhjyXmP7TivCOqX3rXWXvX4r9gYxRxPzr0Ag:HWvHjkbfVPpXEyXgTpRXbXWXvX4r9g+Q","tlshash":"7662e8fca3f458e83a479f74c46f600e713b547daa5285d9b678acb056141e87702fc4","size":15602,"data":"","first_seen":"2025-10-14T22:47:35.996421Z","last_seen":"2026-10-04T05:23:06.908459Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/9157-1ba04d5623695b43.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07df211aa09f7a327fd8f7536b1f0f1","sha1":"5e3565273ec641ac5cfd756f5a472cab88fb2fbf","sha256":"c9a61872f0519908e071b9a59fef73f722cfd24c6b3b2800b82a5d8edef6705a","sha512":"b80ff42d0aa35f0e369978332f8517e7e0b2562857f29ea136f000a5d64b77e978245dcff3bd007fe982155e6dc27fd13c7fcc3c65ee7a7faa1d76ab32d8462a","ssdeep":"3072:fexL57gsIi4o2r5pCJfqeaaUxWUQwA+SPg:fsLisv4dQJfN+WpTdg","tlshash":"45f307ad7115b02d4ab31abb40bf5807a87817361c0dc8b0e354f99e91fdad9616bfe0","size":159124,"data":"","first_seen":"2025-04-05T22:58:02.07516Z","last_seen":"2026-10-04T05:23:06.901752Z","times_seen":1919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winonevip.cc/w","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T05:22:28.019Z","timestamp":1791091348019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/html\r\nlocation: http://winonevip.cc/w/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqvmURTBfTRy%2FVgctwTaETx9aUS9r1xvSry3%2FfABNELYRHXn9B6xAWE2tUoFJuh6W4vv4Zbhus7kjBmLYe4yGOTphsheQSnpj6rPCAqlelryyp5HqzNUn7eBaVW7oQg%3D\"}]}\r\ncf-ray: a451bfbd1d855693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T08:32:37.178647Z","times_seen":18821723,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.428Z","timestamp":1791091348428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWXrlDojwoQ%2FWrVzuUA3Knerqlsy2YPCu8yzs4koTEsCm3IgB8uZZeaw8XKgh2LVCyzmPUAAtvqKvwnkzszcETX2hlQMzIom3hA9E92ZOfKuHwaWznGfCanbPNAAQhM%3D\"}]}\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"e2-1a104d015c7\"\r\nvary: Accept-Encoding\r\nage: 118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbfaf185693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":870,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7a5367f9275c124ff441c9f2dda2be9a","sha1":"56f8efc747406730e680b5583b239301797b3f64","sha256":"0d653de16d82ad5663b217d4f67165a5b6d771a51a38c219689792e8566c0eb8","sha512":"c2a82168a520244bbb60a03ab8b4fbf64319ec5f6d01fbe5adc9965af8db74b0f0e0d6418e212934a9f667317e916f879cf9f096bb684d404258653708db6172","ssdeep":"","tlshash":"c1d0a78939817d1d2a136564d977086136f704a8789bbcc166209d911c333ac83a1c8c","first_seen":"2025-03-19T10:41:28.874854Z","last_seen":"2026-10-04T05:23:06.866538Z","times_seen":1921,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block2_1.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.463Z","timestamp":1791091348463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block2_1.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35336\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"8a08-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIEpJmyFVBCkV4W7kw2RXhcZkYGMQEgLF6W7x%2Fflm6I9YMdo7ybPoPTiT1Tjv8BwvXRNtuid180y7%2FojTlxggkXGBGm2it6SiexCSgTxfaVDoN0GqnUKynNoF%2BkBPN4%3D\"}]}\r\ncf-ray: a451bfbfef455693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35336,"size_decoded":35986,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27af9080beb8306cddacd1a9037925bc","sha1":"be2a7157460eb6ecec53392c3a0a4b403e86ff48","sha256":"64f67f85d1e3bbdf632351a794605b742e8293f29c762897dcf855ecbcda6d4b","sha512":"6451167d859df5e5eb343f48239026bb35a46a2e6f25cc47bee910ddbc949a37772d5322a27dcc73e8ffd8e534d868653b83d9e0355f9fdb2e703d2b1f651db4","ssdeep":"768:Y5AgxlJUP/BLpP+9ejuyf89L6LrzRH2N/O3jeCZ+EPvxrT6x5w3UBIXl:SAgxlJUXB9mCuyf89QH2N/QeCZnHxrTj","tlshash":"6bf2f1985019152ae3524e25d298752267c7dfec17f0b221de90dfe852f11ee30aface","first_seen":"2025-01-31T10:41:20.160976Z","last_seen":"2026-10-04T05:23:06.867237Z","times_seen":1927,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block5Bg.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.504Z","timestamp":1791091348504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block5Bg.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53544\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"d128-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fp5zzku8O9UpIJ%2B%2BwYDmVITv5ixFzh%2FQVPfMIKr69X%2BsSYQOLwPRUG5Bk08ATbw96JKZoOORq0hz77NrgnLX7z0KF20KoTOZdxZ8x0WApGsRyHfglgmcmBbt7QSxHbU%3D\"}]}\r\ncf-ray: a451bfc02f765693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53544,"size_decoded":54198,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6d0567946b20d3f91228186c8425ade","sha1":"90e84b04c251dbbe1cfd12cd2220f07beed207f2","sha256":"5782471d28353cb1ae76e0d8463801d81bef491501aa62f3146004df0fc8ede4","sha512":"9f1b0f50c8990665ddc8d8489742eb34e13220e47977a22227dec4189fcd725fd9452c90114fab8f1a129bda2754a925c5b4a60bbe31fbf02dcc82b30b78b4f9","ssdeep":"1536:wQBneNzFJFsR1NTJ69EVl+DVj6VwVo/aA2G4Z1KL7/bY:8NNc11Vl+50wOCA2G4Z1K3jY","tlshash":"c03302c8121dac27bda99a512204cfd742b198ce5ad860b1edc0fe1af12c46ec4d5cfa","first_seen":"2025-01-31T10:41:20.129062Z","last_seen":"2026-10-04T05:23:06.867886Z","times_seen":1930,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/api/extra/promoIp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.797Z","timestamp":1791091348797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winonevip.cc/w/\r\ncontent-type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSBQp%2FV%2FKt%2Bi5pcRorTIKrVAMtw0k1H7UAnwqD%2BOH1dLk57BFwhnA1qDn5aR2dcaNDxgKflOv7IjxEhQiYYblyiXv0JSbF0LOHM4qg%2FYADRQqpI9ZqOWpyJ306tC0kM%3D\"}]}\r\ncf-ray: a451bfc1f8745693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":553,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-10-04T08:33:09.239735Z","times_seen":193121,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/global-error-8b742238adb6a5a3.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.437Z","timestamp":1791091348437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/app/global-error-8b742238adb6a5a3.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"56e-1a104d015c7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYnghcEiXxvVWCL4LN6AD72NPnfsjbK5seBWGdbl6QOd8m2ZvoKJfCRnLOjuGGHuz0YofCSrx4L6e%2BqtFwotDaQr5gOSxUy69zpZmh4%2FzMBePanDHQjMnaq0SjRF%2FC0%3D\"}]}\r\ncf-ray: a451bfbfbf245693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":1406,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1390), with no line terminators","md5":"c0093b22be6609d18ff430e7880188de","sha1":"18d4a05eea23af4ae3e18662ee7728912fe7b1d1","sha256":"07604cc56cea07e226aec7b1cd3bfdb6df907ca4288a50f18ac864db849ecdec","sha512":"785673a17a523c7eac0ae9edd5b401d61c4b11ddf109a4d6b9249dce7e2f5b3dff0da38852c2365245c3e2f4260ab01936f589cff05b243bed92c92d49a1c1a9","ssdeep":"","tlshash":"7d21118db0807994665ba8de916f940d729b259d100d2ca2d9725cb11c663dc7903fcd","first_seen":"2025-10-11T08:19:51.900596Z","last_seen":"2026-10-04T05:23:06.869226Z","times_seen":1475,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/317691348e35dd2f.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.416Z","timestamp":1791091348416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/317691348e35dd2f.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"853-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HO4hvc7znpkk6AKIql1vAxSw%2BS9yWotoSHNpsYA0QpTugJlyvLfjkI0j%2B%2FTu6xfIojvKUUV02g4nC3NHhLc0yo0gV2WQiwO%2F0r1AH6Ngu6NquD2G6ne%2FlvTVs5Vp2sY%3D\"}]}\r\ncf-ray: a451bfbf9eff5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2131,"size_decoded":1394,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2131), with no line terminators","md5":"c66423fb88d7272cc42515b5c255800c","sha1":"622df8403db965331f0108ad5e532c6a1831fd1c","sha256":"28de71941d77d94d371ac216119d39292e7a92b5baf7c36feede5a4db9cc4437","sha512":"35068b1c594a31b430d7ba1f1b1cfb1d081980251514b42b7c6ec69b3f395bcf56e25bc231beb0997853026572ee853aae533b02b49ce8e0274143d10373b3da","ssdeep":"","tlshash":"6941223a303ea2ff7966baf254dc049ba127c9815633af5da6446d39c3c91d10b61b8c","first_seen":"2025-03-19T10:41:28.890253Z","last_seen":"2026-10-04T05:23:06.870016Z","times_seen":1925,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/2771-988eaaa05272970e.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.433Z","timestamp":1791091348433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/2771-988eaaa05272970e.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"c290-1a104d015cf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2OO8iUZ3Kw7Dbzms5HIYp2ZLpQ2vneLPzlKqx%2FKrLTAVJ0c2nghH5kWebb%2Flfl6YiaABYWy%2FyF7kVEyMFl7PqfurUPQpNfnQGjb3ZI1xfEJHIQqT9WBF%2BzcgMrgoLY%3D\"}]}\r\ncf-ray: a451bfbfbf1c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49808,"size_decoded":17900,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49808), with no line terminators","md5":"bdadb203444e1071d192ca1ed0f96120","sha1":"c3ebf75022e9fc39916c316b38bd8ee45949b21d","sha256":"72a69f0e2a72941e227d3f5cc3106141081d3d9cbb2219809561dc24d1fdf890","sha512":"b9d067750c3752a2004d8da9df6d6a95f6fc0b96e66f9f51e35efc39f58307b42371e50a02347d864cef7032da1a74a676b85c62a7768bd06451895c9d10a524","ssdeep":"768:YrFeRJM1vTuWwywyviwZvr3AAhce2hEez8KN40nLgfNEbk5a29aoLpsgYXzFM9Yv:9uSWXP2hgKN4cIrz9UC1Ota+5scz","tlshash":"1e2308ddb3a9b9d0f4069b94ab6f6818713f22fd9f05c460a6bcac1061144cc7b4afc9","first_seen":"2026-10-04T05:21:12.485968Z","last_seen":"2026-10-04T05:23:06.870591Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/holiday/hat.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.453Z","timestamp":1791091348453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/holiday/hat.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 06 Dec 2025 02:58:06 GMT\r\netag: W/\"bab-19af1985fda\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGaxVXKyKlEebL4CTs4VEpORen4WqkRwd2baLu0HU4P3o1NsIpEQoOh042%2FwEPS3cNXod3Rr501UwkGR6WLpz8bVxb%2F8w1D539ZWrPwK07vRD5M4ZCMMKlgeaMXN4kw%3D\"}]}\r\ncf-ray: a451bfbfdf325693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2987,"size_decoded":1587,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebf4ae376fe7b0c4da02abc9a0e648cf","sha1":"74f107d8c9add6f03d767e3c60b4b10d90f9b2aa","sha256":"67cdad7bd65668f2f0f392efb2933b7ee75902995fdefba25792859e4384b566","sha512":"b3fd5d449af21db89d091f46d6399f4e446889580de88f08413222d8f2b4a66c10eb09c0c3277126884f8c86fa0ba8310edb3269b400c85ef7afeb4c22a6278e","ssdeep":"","tlshash":"4c51f0f069fc608c65460738e6be88922f2d99fbb20445497d5d2ab0d717883f98fb94","first_seen":"2025-12-07T15:18:05.826288Z","last_seen":"2026-10-04T05:23:06.871305Z","times_seen":12318,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/stylesheet.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.586Z","timestamp":1791091348586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/stylesheet.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/_next/static/css/0c973de4e2fc1e14.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"1b47-1989632ac00\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwTckB3qLyrAQkeD1%2BZvqtzTLxsVaSNH%2FgknTjOkTqvGDMv4%2BcIuyNpDgoqbOLkXuRI5rardGvi7EAzgUSivVV9AlMa7V%2BTLBPBNwsSsYxUdj293DPrE58ayTQddHzk%3D\"}]}\r\ncf-ray: a451bfc0afd45693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6983,"size_decoded":1476,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"13a30e1d1d98980f8d05fd08ec50bb35","sha1":"6ea5a517edd970ae8f3ac4d194c27d6bf5ff5433","sha256":"474eb22e42e75ae5cd195e8b724c0c35ac1f40bb1b6cedb21e7e7f290aa9792c","sha512":"37b23920f002d430045ab3b7686e53d56a8358ac999a9e69a7b8b25236d7a43719dfa78e8f1696bcf12a2baa947bfe660f0544aa5369c72bf70f9e65ebffe912","ssdeep":"96:hv/VbGB9pVwhoEVfaSmVtLJdV/lByoVNBhBVECGVDdqOV7BYKVzeoVhDIkV4A1xa:jyvifsv/l3N7ugC77ZhJ48DP4hBwTTq","tlshash":"bae1a7508acfb4d9e46e188d37cf5a64c60e301b2009b95bbbfde9445f6bb9e425072c","first_seen":"2025-04-11T21:37:07.818928Z","last_seen":"2026-10-04T05:23:06.871934Z","times_seen":1907,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T05:22:27.891Z","timestamp":1791091347891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nlocation: /w\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QV3AyHqhh38wYElVkEq8HYfd4hDnDR8L0LUuiYIvxDD3yu5TNpB24qYJa%2F4pL%2ByT3J%2FizRQn%2BSA6bmk6zCoMG6DjnXdDJAesUwQbzN6ZbQVZ7f8v0K3ZKWtdiiqerYc%3D\"}]}\r\ncf-ray: a451bfbc9d405693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T08:32:37.178647Z","times_seen":18821723,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":7,"connect":2,"send":0,"wait":83,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/(landing)/page-c140914511785ab3.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.441Z","timestamp":1791091348441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/app/(landing)/page-c140914511785ab3.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"4c67-1a104d015c7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPzBoDpp0r5CKquyhsUOZ48PHTt6r%2BNMaJjJTQrNg6Br9FvrBu5lbarDoAzj0KKnkjFl6tKRb1PsYrzZz9zK2DWlR8BJ7m1ekEYcUsuah%2B5utCfUa7q8qcT3ePOX2YA%3D\"}]}\r\ncf-ray: a451bfbfcf295693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19559,"size_decoded":7288,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19559), with no line terminators","md5":"ef3278ef467378e1fbe5168193e36f00","sha1":"88dc684e774a9c1a8e555214034d62c7fdfe0604","sha256":"34ed9a9e77922fbc1668bfa351b68361b474a46f0db5879886d1314090e6250b","sha512":"9addfadbeb2739354edeb2610ad37349fc70acf2b2abd7055060435cd1ee24c964a3ace5620177afb73a4de0518122883583c96c9a05e33ed7cc2f6ed29f23e5","ssdeep":"384:F05D8yjHisHBOham1LobXv5LD5nP1vqLzxtJbZOr:HyjHi+CFoXv5LDp1vq5tZZOr","tlshash":"66928319e05de6e8ba720c50962fc449722e365ccf09ccf4f9bca8011a5e4d87b67bd9","first_seen":"2026-10-04T05:21:12.454384Z","last_seen":"2026-10-04T05:23:06.873119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block5BgMobile.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.508Z","timestamp":1791091348508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block5BgMobile.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49074\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"bfb2-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdUFYgSOwpplIceKrqBX7ijBeNAL6%2B88QE%2BFs5UviwVm%2B5ToCJc6q%2Fb6CE%2Bayod66BbyP4zq3VFbwNvK6K826gI7hQmIPcG2V4%2BOD8GrODbIA%2FXx7PemxQoZBzCCmVE%3D\"}]}\r\ncf-ray: a451bfc02f7c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49074,"size_decoded":49732,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ce596f2875175161c32cc277e495175","sha1":"de336df23f662cb35e35030d7ac43105fd6f75af","sha256":"3f6626eb2f59ea9fc3a1297d7fb2aa365f5270f0ae3a84586a3eca83dd243ec1","sha512":"25e128edd7574d76ca34e04f30b86cede5efb8b27d4a257898577a96295100dbefd4f3de5ce2d6afb9913c3532ca24bac90e60e90bf926b2d50b9ba7b0f8b02f","ssdeep":"768:hsWhVWv4Ru5NV5dm4vdWHe7GtiCzAoQegljsVNRiKIds4bTyNnu5UBLJEzxTX3:J44ANVP/10GKbQeaj2NRFIKBLJkFX3","tlshash":"752301a0ce99f00b89649520f529ebe62e7147cd8f9cd71a188cd07465faa1fd0b4f83","first_seen":"2025-01-31T10:41:20.132022Z","last_seen":"2026-10-04T05:23:06.873875Z","times_seen":1926,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/favicon.ico","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:29.038Z","timestamp":1791091349038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:29 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nage: 118\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHmZK6gRJ0R8%2FnR6UHfS5%2FWduB9KZSJx0j3xbD9YlEh5CIU6gh11IYdf2cAba%2BJsZ8uT0aZ%2BmBqW3wS8RKUcJFt19tMD7vAge6VAAwXSa4NXOCMaM3HkOxpyDg2RmSs%3D\"}]}\r\nlast-modified: Sun, 04 Oct 2026 05:20:30 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a451bfc379645693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26622,"size_decoded":7083,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 80x80, 32 bits/pixel","md5":"9486eedc7adbedb673e2d13ff53d694f","sha1":"593e82845889df7ac55405be300ebe67f3610694","sha256":"393a5a6dfc60be0498402043769134cce07b6a878d705d47f279b03ab9f63a80","sha512":"80c70101f26850dbe655c9f17e090a35d4085f4f099b0b3a04592b70f6932a355aa6cc586a278039ab7e922a3028221174620fb82442441b9094e90493083e1d","ssdeep":"384:WMRydD2nfzWB3BETxEf4df5t+Idxs/hqSigdz96yQ9uB9lGdNqlU4nN:WMRYynbWB3SNTPxsddJrQ9uLyNZE","tlshash":"7ec2abf6671102c5d4407ef9ab04277015f83e60b4ece7991c3bbb7503b95ee8279aa1","first_seen":"2024-12-21T08:51:41.904524Z","last_seen":"2026-10-04T05:23:06.874558Z","times_seen":1076,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/holiday/bottom.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.522Z","timestamp":1791091348522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/holiday/bottom.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 06 Dec 2025 02:58:06 GMT\r\netag: W/\"65c-19af1985fda\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMOoWl%2BCmaIYJ%2FFEnnYsLc%2FFbODe9A50rO1sLXKZl5Y%2FrIKZ3IYWw3Dvtn%2FKzrbC3J%2Bip4Oqa0fRkVxzUJMKfMRQGwQtjwJZ1vlhUrKq8qeSastdkV3ULILM2rXAme8%3D\"}]}\r\ncf-ray: a451bfc04f9b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":1212,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"165634688949125db4ac194fe8681813","sha1":"c8d8f84854dc11683adff1b17974b18a3077173a","sha256":"865ac8ef0db76c4a0224fc4a29905e93b9e1cf278b42f7c95c8e1d82312d5e42","sha512":"9a4001c1e30d41bda349a631e7e00d8cf2528532717f23c5f19db0ac56dbd771e779ba07390b0c8fbe0beb77b3996e45b9bbef7b770850f8db207beff1888a7c","ssdeep":"","tlshash":"f2316f5c60b6ed389984c14c8d1fe0f5361f2fea07d6975620844dadfb094ff29626d1","first_seen":"2025-12-07T15:18:05.832815Z","last_seen":"2026-10-04T05:23:06.875855Z","times_seen":12307,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/api/extra/holiday","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.798Z","timestamp":1791091348798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /api/extra/holiday HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winonevip.cc/w/\r\ncontent-type: application/json\r\nauthorization: \r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 29\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maIpJ67%2BUbjKzfNizUeyH2jDxjH%2BNQXh24h0AlsGYfPoWdSfE1bdTT9n2Egp%2BrbnWmrHQ7MDac7kKv%2BuwJzA4FOTvWxwoQ5bXVqFXmZXoaIAcN6A1HyNYy59eT%2Bc1uA%3D\"}]}\r\ncf-ray: a451bfc1f8765693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":566,"mime_type":"application/json","magic":"JSON text data","md5":"64bd1ee4cca69558fca5317e81a2b469","sha1":"7be9c89474e4f8526395703aacc31165a48f6c7f","sha256":"5ec7611613d86543be443ebd6f2043ba9cb5379a9e39e7b37c8fa3d7e88278d5","sha512":"457194cab8d05978a245ca36617cb89d474ddeb0c1181e5d5e29f03a092c21fea68332e1e7bd23c01a2721aa304d67822888fe41d01b69f83da3eed5e149bc25","ssdeep":"","tlshash":"228000022a2008aac808228002382f0028a8222ba0002008e08ca008eaa2022308382b","first_seen":"2023-06-17T21:25:09Z","last_seen":"2026-10-04T05:23:06.877907Z","times_seen":16249,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/33d281c8208aa46a.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.418Z","timestamp":1791091348418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/33d281c8208aa46a.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"a54-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t894FnBOPZDfmquUzz%2FcsNRKAOPpYEMHX4ys8fqwO8EcJ5qjNKwqKy9GiGg28mVpl%2BgLdDWVeMqLKJAa0wwR3l%2BAESFBPPBDvEWZ2d53Pz%2BSW7gb6frPf%2BNQcEy%2B8YM%3D\"}]}\r\ncf-ray: a451bfbf9f025693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2644,"size_decoded":1606,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2644), with no line terminators","md5":"9d935283d4552afa39b54bab1beea66b","sha1":"144c949c211c4280cba0fd88949206f468e1357a","sha256":"5f91900db8f97cf0c851424457aaed6b05a56fa946ef6845cdad4403375ee67c","sha512":"cd243dbbc68d1bf223f0e4121e0fe8df61b20f8fab7734eb8d5d578c8fc1967cb0a7f8db82401323b81b9a2e433371b176adf0d19d5bc734cc8cc81a999ecf31","ssdeep":"","tlshash":"50519fe3a67134b461154e536f50b76a30f487b663375a23b619ef2cb18f6d3091c24c","first_seen":"2025-01-31T10:41:20.146825Z","last_seen":"2026-10-04T05:23:06.878546Z","times_seen":1939,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/triangles.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.457Z","timestamp":1791091348457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/triangles.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11792\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"2e10-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHM9tysKM2iPDNR27vso8x95T4IZDIxZUQZeWsxgEAu6o%2FDqeKS4G24EqgQrcSzo3Dg4L3jBHKOxPtFCBuL5HJoHMV8Bc%2B5Ykh2r0xNmAX%2FP7Abzm4eBoClkSUz7IIo%3D\"}]}\r\ncf-ray: a451bfbfdf3b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11792,"size_decoded":12442,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f05371865ecf62cab6e1001717f97449","sha1":"00d6417678f2f685bfc86621c08404ce4253bd5e","sha256":"002a8352268a2601a960a8e9b0d195162969c477e0588d706db73ff7311b8ced","sha512":"9e28d757cc992746bda182ea76cafa4709ad4ab239206d68c1468d9a2fc00cf977927054ed2ea7447d69d53a876315aa767240e079e7ecedc66bff05a8556714","ssdeep":"192:6FsZYa0wgkcKoiKgstmh7AHiik445mhlOQHJqFOe2NoE0hp8W7Z5PAVMC6LA0gUW:6oYaZgkcwQ45glzRe2GE0hOW7nPAVgX8","tlshash":"2d32bf7f338274f57d2b214219359e571b71c7404be7d720c813b0b7cabb88769948a9","first_seen":"2025-01-31T10:41:20.120763Z","last_seen":"2026-10-04T05:23:06.879143Z","times_seen":1929,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block3Bg2.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.500Z","timestamp":1791091348500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block3Bg2.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42254\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"a50e-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuXDjKFZpeFvOngWzbKRvVMT3R3wz4sp2lmBonryTY827jdo3McIZzt0UWwshXZqShuBDhyY9dVAFP8BeAE3DEsLZEkXWOwt086gElUnyISceK1hxiuu8IshXlOnkp0%3D\"}]}\r\ncf-ray: a451bfc02f735693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42254,"size_decoded":42898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d478c3f4a716990ed217e6ace31734d3","sha1":"c773fb06a91834dfa0874a7ac02e1ed063709706","sha256":"5111eb0ea2e9c86e8f4c57da58821b50781c345eeb65a397dfe10799f34c21f2","sha512":"d1844b16ad017ca258c943cef26e6c2125b94dcc9bfc3a62a13e83a8ebe510230d9531a156df6da080597b6697bcca10ee75912ba7378e17c4266f5b9f5aa047","ssdeep":"768:W62xl5LOCUFdXVdS1z0zfs8ulIjL82K7usf6571t0lfk3dRGtrOOdTONmk5T4LHP:Wtnqvdmubs8u6jL8Tusf6Z0l+wJwNmBz","tlshash":"0d13f1b13d4b9594bc7c444cef80074f9acc66ed9182dc67c1ae68f1a789ca84a309f4","first_seen":"2025-01-31T10:41:20.124542Z","last_seen":"2026-10-04T05:23:06.880338Z","times_seen":1928,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/TTNorms-BoldItalic.woff","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.708Z","timestamp":1791091348708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-BoldItalic.woff HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 34596\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"8724-1989632abf8\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V243W24GZ0Ggc4gT9zdJrTojf0G6BGbx6P04zYTtFKeLvTS%2BEGnAbM5gpIhtVrmPmYE18totWI74FcsNdvgKN0SBbhpEwKy4fzxm54gk%2F0m%2FXL%2BYqfzybskDXdE%2F1qg%3D\"}]}\r\ncf-ray: a451bfc1782c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34596,"size_decoded":35249,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34596, version 0.0","md5":"465218007e4961c4cfb7c69de65f48f1","sha1":"a7ddbf595cd43842cb2ee6882cab87c16681aa3c","sha256":"18c6d467acb00c1afebb5600cfae78d40f36ef8d9d6885b9cd96b9fe9515acfa","sha512":"91a17a787bb4e48f5a1cc974e3c036e5dcf682b8d984004c38b0ace3f512cf33f889154aa76d50f2c04f4ea326f78b9bd59fb47f0e608d1b3da696d749b169d5","ssdeep":"768:tfipHqQtkX1LKPAfhu2ebgGHINfyARWMzd2:tGtkJmEfyARzR2","tlshash":"3ff2f16eaf593c85c3e756f542819ea138dc6a59202eb0c7cd1ed840c2fa166914fd1e","first_seen":"2025-01-31T10:41:20.138537Z","last_seen":"2026-10-04T05:23:06.881581Z","times_seen":900,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/TTNorms-Bold.woff","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.714Z","timestamp":1791091348714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-Bold.woff HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31356\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"7a7c-1989632abf8\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkXB5%2BCKy50UHuaCdRPrgLM%2FDp6F6wN6DlbLJBrEk4Y%2FFVcing4OSGQSBU2HQN3lNtW%2FQPuS2m51cuSfV3g13ezQdir7ktyzyVDJghI34SFqLn9ODN4LsxDkOjdpt0E%3D\"}]}\r\ncf-ray: a451bfc178305693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31356,"size_decoded":32007,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31356, version 0.0","md5":"1009f03324315eb8bb66d610775afe82","sha1":"0f23bd1f8f9cefd55d70e8adc0630cef4c17ca52","sha256":"9e710930d6b03e68bdc6ba959f0d2c887130bfb798396be23a681052a65dac08","sha512":"aa49efbd3abbf9f1725d374df9cf78c265404df78b7559403ee63e87d753156cb5c29b7c12a464db02984c2c487a680556ce95d3e4f549faf2aaa8963c6513bd","ssdeep":"384:yDE5sruZZalQZm8rBdPelcvyApojd2CijOognqC1paaHxOpS8q3YuqvHd3nbTTzY:bZoSZm4zm6j3ZfD+B9M93TY+oc/s","tlshash":"7be2e0eced1fe7a38314c5ef11354e2b137429c7701bc78986289555eca61b2bd31513","first_seen":"2023-05-07T16:06:45Z","last_seen":"2026-10-04T05:23:06.882762Z","times_seen":1973,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T05:22:28.099Z","timestamp":1791091348099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/ HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2r09hAgSd11Tis8ChhhCNEeqyD4qWtp1UIEoqI%2Bqdp%2FNfiNE81WgPGTN8F5RDyZ%2F9R9my6tgHVafUyN57oYmkVLflKG%2BJW3BXAzGfZrkOhLicrw4jT5kqoFt%2BySfdNc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbdadca5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39260,"size_decoded":10979,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39259), with no line terminators","md5":"cecf883bbe110096b487fc21d4f2af2a","sha1":"3b73f7a6b423e7a64e40c5a9ff6c176a469b5d07","sha256":"7fdd60dc97b0e247e7134fb0cd99406fbf74a09ab98ae423ae189da4a084570e","sha512":"168f721052e48234ed3e3bab2b3cbabcd7b37d4d8c2c866af17f501281d982d797f9f73a02601fe81e289b9df1eb2cd3c63fe739f2d20dab2f2fdeac97180e85","ssdeep":"768:pAsTaL+IKKyeKNJW8KKyeKN1vh0v/jNvgf+/v64vLvf+Up1hLobGZIkoWMmMGR:phTaqIKKyeKNE8KKyeKNT4BKQ+UhYsEg","tlshash":"3503e975e04cd89694539fa1d63b7e2524eb506ece0ac9b882fcca5a53c3cfe5c25c84","first_seen":"2026-10-04T05:23:06.883406Z","last_seen":"2026-10-04T05:23:06.883406Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.423Z","timestamp":1791091348423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"2a323-1a104d015cb\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UiGT0ksQX5emcW73bDJzVx65PEQBV2ceb7zrfrUVq2pY0QPvL%2Bbp7iIgOLJ8s3CYQt6ScA7jEX1ENXj9knQNDzYTECFadIRRIjR%2Bh3lJ5tmnEgsrXSmZ4tE2Ooa9WLQ%3D\"}]}\r\ncf-ray: a451bfbfaf0a5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172835,"size_decoded":54462,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a2e6693b6b8e2ae5167ce7ceb21dd431","sha1":"625b83e4cdbc0bc71ca90f7de6633000d5908f96","sha256":"a87677f28d0d640a628d81e90ec37a86c6674c1c656277318f17b14c9542d045","sha512":"4a219d7524f60f77557dd49d61838d092f7517e9b0984cf2860a9638608cf848c381d9988dad5129a63b4eadf274941a786cbc08d3052715407962a6e131aead","ssdeep":"1536:tVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:lzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"b4f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-19T23:51:52.179106Z","last_seen":"2026-10-04T08:02:04.764185Z","times_seen":4556,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/land/gifts.png","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.462Z","timestamp":1791091348462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/land/gifts.png HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 39210\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"992a-1989632ac04\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1po%2B26%2FAx5tUP8WFbbp0GWmuaYBJUG6EQj7kdI%2FtdWVTjG0CLQBqf9qGM%2ByVxo4GH03XIKm%2BH78%2F7%2B9NLteZJdPkZV7IwG69JNXTHLyltnUZmEYI6u33gbs%2Bh2%2BbI0%3D\"}]}\r\ncf-ray: a451bfbfef445693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39210,"size_decoded":39871,"mime_type":"image/png","magic":"PNG image data, 146 x 186, 8-bit/color RGBA, non-interlaced","md5":"a28357f6c9f39f6ec64467e56d3a088f","sha1":"cb234100a21aaacf188eee7b9b42de088714cc49","sha256":"8ff0124600e50a161b28e2ca5bfe0af59aea0df8925436fe9930041b26b1082a","sha512":"de04eab9e4ef717730c25dd226941c92a7510df30eaa56454113dd543a18c70dcb4c2f7becba3ff7a6b825b754a4ba1109016fe3365b3b321a7566660fc54d93","ssdeep":"768:91k0eN4ZSFsy+dSc4Hd6WlWv2zVdYg87W+iN8Y+zsb6KFxAJwXQ9k:9W0eoy+Uc4HQQNzVdYFYAI1nt+k","tlshash":"5403f185412d4623ef2d5f86094530e0cee926bf9d49de5c427f772b0c1b6394c86a6f","first_seen":"2024-12-12T16:53:28.001894Z","last_seen":"2026-10-04T05:23:06.88498Z","times_seen":1922,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/footer/crypto/ripple.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.520Z","timestamp":1791091348520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/footer/crypto/ripple.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"10f0-1989632ac28\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLzlA1GWE1BIfQb1ufwlYIpqcBcgrRZeyxWgY55WrCaVT58O0kBHhmiKCfWu85hX7J6fVMsbEE7Ki2X6KRxJ3lPa5Jw4drvvoaKY1yCxszX%2B%2F93F3WxXgwT9iiEqNqM%3D\"}]}\r\ncf-ray: a451bfc04f955693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4336,"size_decoded":2553,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb424d4c8dc6f15e67f557751fe78673","sha1":"7a1639e7a68d1be178ddd17d14e178ec0abcd8a3","sha256":"c0ec370aad8db9c1fceb2f5b9153ae21967ae14e1ffd3ff128a51fbb990c96d6","sha512":"a3a7da2cc9c9509d36bcd405b5172923cbf15c099f9e6f632797bd31b406a3a288a28c9a9bdd4ccaa12ddd134f1ba918d8e03307dd5b4b815116efbf7865426d","ssdeep":"96:clv5Q461GLvZDxjJcwPgDDO+N7VxpF4vk5tQwbzDUu/O0/z:c95L6gjZDxjJ9PgDD1N7VxrQkDQBu/rz","tlshash":"799175f7e7e6a2f0d90affe5c9359585736a2cfb6f22c75843618e40fa1605c8448894","first_seen":"2024-12-12T16:53:28.03294Z","last_seen":"2026-10-04T05:23:06.886156Z","times_seen":889,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/3f1fd21e079483d9.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.419Z","timestamp":1791091348419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/3f1fd21e079483d9.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"1fd5-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tWhQRUehd86%2BXXCHIuxaB9u4algf%2B7lbPcdsvdN9X2RLyQOmL8fnuHJVpdRKn%2BrK%2FAkj5ZG2KIC3HPLoQZsXgb1DuajO1RP8%2Bfwr7MTQEKjf70bo7Sza68dg4Zmca4%3D\"}]}\r\ncf-ray: a451bfbf9f045693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8149,"size_decoded":2599,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8149), with no line terminators","md5":"d2992b3fc8846472b32f4eafca8c141a","sha1":"b1ba8f25dc911871f7455fa2593ae6aa0510a461","sha256":"0d2d7b228b3d0e0becb161a8836e846fb9c9400e842f9bfbb954c3491a4ac062","sha512":"b612fc58e50ef52cd93baecf264bbcb5d88cbeb7452f5ef3ea8a166ee339f03b1ce813d59a59cd5b2da1ad2faada5b915cb4c033c00f9881fc3cff898dd1130b","ssdeep":"192:ZlFRa0g88VW0QbxPCjMxL3uy9o/zvoPodLy/tlt:K0g86+PCAxj/94zvx18t","tlshash":"0af12332267a602cbeeaf476efe0b96931c0c527933b15e1fd49f926c08916b3711359","first_seen":"2025-12-07T15:18:05.819577Z","last_seen":"2026-10-04T05:23:06.886707Z","times_seen":1144,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/footer/crypto/ethereum.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.515Z","timestamp":1791091348515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/footer/crypto/ethereum.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"23fb-1989632ac28\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ak5ma4xshq4MhONK9vX%2FKSdis5eCeTvfCiUhXymzURWQsFuyC7ySt%2FRpPNiQReLqH5x%2F6xVLgBfAAiP4MUdS4lffDSW7JAxM0jrge1c%2Bhav8xv9TgAm3nscrahOq3M%3D\"}]}\r\ncf-ray: a451bfc03f8e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9211,"size_decoded":4352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2231ac0e4506dee9d2d462005acbfeeb","sha1":"7bd0d595f7d4c2ee4d4720c6f49fda508329ffc5","sha256":"50172982361a6b04bcbf77fc5a94afc934341cf5097af0f6bcfd6d8e40c526e1","sha512":"0422f4a9df431069ac18664a8b7d8834081ccfbd134e8bc0124e727e86ffa017e6c1e9d777677b0f4f467dab7dfa8315340919e1703d80fb7e59473a3869ac0f","ssdeep":"192:Fu8rsMA28iACj7/lRrVzYtxFv/QaTY88IA:4qpX7/lJVUFnpY88L","tlshash":"361262de77ebb3d0d106f3f09a2854693b0b35e76e52c7a5c7664e8aaf0143c8809c85","first_seen":"2025-04-11T21:37:07.809671Z","last_seen":"2026-10-04T05:23:06.887812Z","times_seen":894,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/holiday/top.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.456Z","timestamp":1791091348456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/holiday/top.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 06 Dec 2025 02:58:06 GMT\r\netag: W/\"1ad93-19af1985fda\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FApGcGGJrtvXUuceEwueuFlYvGSm7jFGPMKDbzvUk%2Blugm3dvmE2AGVPv6kIsVkLBFyFXSyy7538OoV%2BcHwN%2Be9R1l%2B9HniIqwriciM0vmumhaF49vpeuOerea5IFg%3D\"}]}\r\ncf-ray: a451bfbfdf365693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109971,"size_decoded":49608,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"765e4b902462e81209a68203122c5462","sha1":"c8a22e10bde49777ae443e9f3a3b6bf474659b68","sha256":"0d81c69880f645eaa8ad5bc7f874fe5c302d163c6ddf8e2b2e5633c222949f88","sha512":"d34eb7f720beacdf9d545cc1219a56e2a26b05477d98d9ed188c116bc9319de2f49db046893a0ad1680ae6a9c81bf69190f5de47bc94fef0b5f99049f36a65df","ssdeep":"1536:TVcmxdYMDacj729Kbg1AsjwaT2ROc8n6GheoROmsrLc8h7CJaEukrWE/A:x/FDa42Kg17nZtgER+","tlshash":"47b3f9fd6b6185e0eecf8af1dd3649907f1b34fe2b52525482a4ee607833e58894cd90","first_seen":"2025-12-07T15:18:05.795582Z","last_seen":"2026-10-04T05:23:06.889214Z","times_seen":12320,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block1Bg.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.459Z","timestamp":1791091348459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block1Bg.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24446\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"5f7e-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJe30ovE4RrFtE%2Bidxqt73vT2kqGmy1bBZgXNhdyVWckQMhIiVXElOa98HETDVYynV7n776qFONf3JM6x44GMIrqIwP%2FxSSEu66gt54h5syWrxOYhUhr82zlHnslTPM%3D\"}]}\r\ncf-ray: a451bfbfef3d5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24446,"size_decoded":25094,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1450x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43ecadeebe099275233f25da3d5d7b25","sha1":"939a8734db86195892ca05078d12bcc5ab0cbedc","sha256":"64cc10e9de9290364654d6f2387eb1333e22f59931d05f9d3626102670f1eea3","sha512":"5fce11cf8cbe35686f74fdd583e82e36c0b4b77ba93dfae8aa271c53b5053de2835ef590303a8f2cbee110605c629d5bae3e1aafe41f86df5422f9c462f41ff8","ssdeep":"384:quk8HyH7AkmJKGiqN6ABdtGFAvUNnReYGzdFocLkHVkKNBJuLi:i8SH7Wz66nGganReBZicw1kcBUe","tlshash":"bab2e115ddcd8d28a650a474095bf1063a9788e21fe5ffe898893010a7cdef4f6a4bd3","first_seen":"2025-01-31T10:41:20.113549Z","last_seen":"2026-10-04T05:23:06.889907Z","times_seen":1925,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/api/extra/pixel","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.795Z","timestamp":1791091348795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://winonevip.cc/w/\r\ncontent-type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJqjAoBPfBAZnYLT%2BmG1%2FBBwRvlOqe8w9ECPwWYAHRz3rhRJbohlx10wr7SwLMj%2FCgFoVya5sqyDsN%2F3upA5lRp6olR5ft66DnEt%2FN9DkSSS1SuJUD%2FjBgJqLBorQ5U%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a451bfc1f8735693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":917,"size_decoded":778,"mime_type":"application/json","magic":"JSON text data","md5":"0f409525e8f189e1d8b7951544ee0ef2","sha1":"a5cded073bdec582cf76137f5109466cd0724c1e","sha256":"ac09d34a4b502f6ca882e485e5cd03629c29e1720b0435c5beefc55e65b33f56","sha512":"b832c7a637726ea8022725f2ca7cb25acc90c9e35327dcdf511ac6dcd1f33c6f6d49b1b717d08f617b29d0378e8ccf00dfcdaf061e1aaf6f7dc814662001cb77","ssdeep":"","tlshash":"3211ca87a2fc278988c70db5ed37ed4cd3ac9641c5994f7d9f314934598e1e12e614c8","first_seen":"2026-10-04T05:21:12.419873Z","last_seen":"2026-10-04T05:23:06.890559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/3635-c03bbd027c37da93.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.431Z","timestamp":1791091348431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/3635-c03bbd027c37da93.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"28c1-1a104d015cf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wC9YBBLPqB1QmwEK4c3z5g1AuERLcbZmyMJrP1lA0lgDyx1nrkDK8NS4gh4xVBVa7Iu6eQYiwwnnc%2FWsWUM%2BoPKcsegmjLJSkY1YyZbxuMQyP8XqunE1gIaymvlHzCc%3D\"}]}\r\ncf-ray: a451bfbfbf1a5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10433,"size_decoded":4472,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10433), with no line terminators","md5":"6bfd3c43b0591fe23f76de6198093a0f","sha1":"be72f5c8b3636e440ddf1d1906bec429efbfd045","sha256":"bc911a058a44d2c054e70930b094a44491fedd6e799b20d70be4dd4a6e066e38","sha512":"3671773055663d50e2f99905e08c8cc942a8070d55944f8e63a29def847608129e854e1897c34de7cc6a11a8e8e81dbed0e39234f8eb1d457d15a87e65d0243b","ssdeep":"192:wHvKgrF0IfA/SoG1UR/CICsdnzGvzjDY4BmdtqcGOJMxLqrdyz:s3CZx2zMdwOJMxLP","tlshash":"0f22b655b265e4ee0ba7d01c897fa246e21d4f1de8c8403a8f1d67503072d9ef3a0bad","first_seen":"2026-10-04T05:21:12.45095Z","last_seen":"2026-10-04T05:23:06.891428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/ttq.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.446Z","timestamp":1791091348446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/ttq.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZZFgVq3sQW3EGSvS1zRJkYvvpLJJ8czhYR1AXUqIcAsl7d0ywpHRtafL6Ywpdk4Y2FmL30CVzTJEJEMl9uUOnUodRNJ5jxS%2BLN2xgzqsRePG7k04bj%2FczMgO7UQhC0%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 30 Jun 2026 22:35:22 GMT\r\netag: W/\"3ee-19f1aac38a4\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbfcf305693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":1271,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (436)","md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-10-04T07:33:29.021635Z","times_seen":1220,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/footer/logo.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.521Z","timestamp":1791091348521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/footer/logo.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IhbT2pQO87gc5QlF6P08RAr41UPWlcnYozEZUxTLxuMtfrOOeY86IaujMIm9xQPxOdYHyS1iL9Cslc5QFMpoLChZfRNCieMjkP9GiVacYs5O3mBZa%2F8xYOT4f0%2BFgrI%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"279-1989632ac28\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a451bfc04f985693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":633,"size_decoded":1049,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80c8e2cf9f696eb6ad4322381b98d5d9","sha1":"ed23348bfc49d553586e68745436221b648ffdbc","sha256":"71b3733e294b0b58be3dce7f182866456985ba3e552642f01773361eafa42e6e","sha512":"0eea292a1c351eaddda2670fdd580b10a63355484fbca26131d0178f6dfaf29459ed8be07e5b2dfdd4ede4317fb54aeebf2300cc63840246f6b757cb80102158","ssdeep":"","tlshash":"a0f062db87b423f8490aa7acfd2d886a2576b4db608508c7adc00d07500819bcc87ccb","first_seen":"2025-02-12T05:51:02.636401Z","last_seen":"2026-10-04T05:23:06.893073Z","times_seen":894,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/inter/stylesheet.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.577Z","timestamp":1791091348577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/inter/stylesheet.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/_next/static/css/0c973de4e2fc1e14.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"18cb-1989632abf4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5N%2FxrDJ4ehi3w%2Bc7q9mPhx9jSbVblObKUd6i21fyl5hcDiTstFaTe5ZvvolLKkBbZI6MtJzA6wLm1rjwVrR%2FJxCBvjb1NUuUZOdMA9fheV6hAmyHYmh98vUt8T8gExc%3D\"}]}\r\ncf-ray: a451bfc09fc65693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6347,"size_decoded":1191,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"0a511d5ef880ee90b13a3114a3580d9e","sha1":"afe980d039932ebdb029eda7b828ea5044f9da25","sha256":"a277e69d8b8344546b1869f001873192c454164940ef1bebca997a648217e470","sha512":"392bef4e910c4c7df5a3730b019e6585db50285d5dd722bed2ce812bc446be78c5b79bb43adfc3889d341de78cec99fce49240872f0500ed4f973b5783b65603","ssdeep":"192:HXKVXsXYwPXfXPXFwwX4XOXGwFXdXhX7wKXmXgXkwrX7XTXxwsXUXCXCwtXJXlXQ:HXKVXsXYaXfXPXFhX4XOXGMXdXhX7fXQ","tlshash":"0cd15403067f2e21364148693f9e9a77fd7c188a71b611a6b979a1500df3c9383cef4a","first_seen":"2025-08-11T12:35:45.430867Z","last_seen":"2026-10-04T05:23:06.89438Z","times_seen":1514,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/TTNorms-Italic.woff","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.718Z","timestamp":1791091348718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-Italic.woff HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 34288\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"85f0-1989632abfc\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvEu33L8Phq5Msq6E9Sg2TsIR%2FoBXUCEKHyuCXJTJjw5M3FUmPmlOpTRrDQvU73c%2FJks78Ie64e8p1mB2WmFt4V9ETTIsR0T3X99PyZbu2qStsxe8SFhP7zQbhWkaOo%3D\"}]}\r\ncf-ray: a451bfc178355693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34288,"size_decoded":34935,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34288, version 0.0","md5":"b073cdd300beb24e86302040f55b6658","sha1":"bb2500568616a887ef4ebabca0ccbf575a5a78af","sha256":"99c12e8924412844876da79b39460df97a481968b669150a3a34456c6006c3ec","sha512":"8f9e337f290ab7aa28f5219e274466af085c4720c0df4337b54c3c3b59e4657e5a793cc3ebddd2531743f4fc160eb14c896781be0cfa6b0b1d305fd03ad8ddcc","ssdeep":"768:u1gN/6FyqBGhpmraLatNGKqo2vICRXPMYV6GIz:u1gNkimmKqxuYV6GIz","tlshash":"e8f2f10ab9a186b8c0cfe7f11c587fb8c82e5925316a7d16715c10f59099f87ef5c80e","first_seen":"2024-12-12T16:53:28.026361Z","last_seen":"2026-10-04T05:23:06.895061Z","times_seen":899,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/webpack-18072e7e4d76ae57.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.422Z","timestamp":1791091348422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/webpack-18072e7e4d76ae57.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"103c-1a104d015cb\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQgFpd3jNDAB6lbiJO8XfX55%2FzjK6%2Fv9%2FAPwa%2BrACHiFf7%2FpEBuSR1%2Fh5r70K%2BSmsSXRpHXKqk2%2BMfJK%2FXEnaxgg21jAKGz1zS5BNhGN7UceQRsJ1%2B61hA37tFTsC2o%3D\"}]}\r\ncf-ray: a451bfbfaf095693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4156,"size_decoded":2777,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4156), with no line terminators","md5":"68b866cdb7f1d26bb46ea645272d2134","sha1":"acf4d81ac086d56753072e528a5d1f1abb88d07f","sha256":"1930228456f99ec3fb1912f148a63538c6fc7b91a76b3cf47b6eded8f57364c1","sha512":"69813733c0ec504af1083854aa0185da4f9663f1403479a3b8c02bf779b37dab2061875a368937e66eee1c9776a34d917ada677769d403a839ac848342b0b74a","ssdeep":"96:kMyYE1q9WlR3lMka20VGL6VLW56l2WRrlwrLDYyM:kz1mWlNfajUmYyR8hM","tlshash":"6a81a7de72a1f4b91782a4a1443f9146f13f28f2281ee4a0da25e4f5fc7554d8323fa9","first_seen":"2026-03-03T16:15:40.656942Z","last_seen":"2026-10-04T05:23:06.895678Z","times_seen":24,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/footer/crypto/tron.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.519Z","timestamp":1791091348519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/footer/crypto/tron.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"2804-1989632ac28\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVv5cicEIkFLYnnFWO5sPuZ33cVdOuokEZzQuDI9XQJIKoyyHRC3Q2RznNgNtCGxyJck%2F4F5ju9FrxcNc7MnXdCuHGlbNe6%2BjWCBNPquZrhk%2FJF%2BnD4ziht%2BgDjuUTU%3D\"}]}\r\ncf-ray: a451bfc04f925693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10244,"size_decoded":4881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c740d433de60a39381d7237d1c0fda5a","sha1":"c80825d06a5ed0e91b6a9e6d6ea914ec33c5cba4","sha256":"4c6cd2f454f646a08860fff0080626b267b91b6c408e82caae9c79791cf456ae","sha512":"b7c7ffe83357e7adac8192e6dbb29a449ee53812203d9cdf150435274cb8b23b51cc15ffcbe8cb2984d373d05e1138ee998eefe956f82e85e8f43b727cfa326b","ssdeep":"192:2RpzD7E+gDpR5+h972SAmDdQ3bjcZWZ6/0VUGRmQp/CrI9t:4I+gDpu9p2jL1RN/CrQt","tlshash":"ad2253d533e6a3f0e506f3f4c82a92723f1b38f77f61c6a9c2a65d94950506d888adc0","first_seen":"2025-01-31T10:41:20.169333Z","last_seen":"2026-10-04T05:23:06.896231Z","times_seen":910,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/8fa659781ff3396a.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.411Z","timestamp":1791091348411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/8fa659781ff3396a.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"21c4-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3GA3inxMRW3AycoYx5xzZSwJcFituyt6c6ENKn51rWBH57TXFAqMUZtYqTLgjtev1dikt4XCV%2BVQSyE0YiLR%2BZRynUoIdRTu%2BeMV%2FFPe261DyiK9QAPpcKDf2osmg4%3D\"}]}\r\ncf-ray: a451bfbf9ef85693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8644,"size_decoded":2901,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8644), with no line terminators","md5":"25e6558b12d5016924b8400768c25abe","sha1":"a6f75d5383b421a8a72c012161bf117ba1a9722a","sha256":"a20d3c3236a63854ec92f8a795f3c386ca7776126d9419916485826cd153b445","sha512":"8b7892d0d27462c8d025c2d109b3c874acf68b7e02c8996113c98757a43641ded8b4f25900c6082bcc35377c66f21ffbc8d2ff4e60e34ed3c9bd7bead3e9917f","ssdeep":"192:ynKRjQoRX2SKRFg4kik8Ux08RY3/RwGuR+phRvN1uhmYwRzMERP+AYRYcURiNLj/:AwMIPhBFiodUWUcra2Es","tlshash":"0502fb7fd03d50b82ad57cb5914c51093423ca02d7b763cfb788f93ad1ca1a925a3758","first_seen":"2025-08-30T00:34:17.02688Z","last_seen":"2026-10-04T05:23:06.897233Z","times_seen":1504,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/c6c7cbe7c5388caf.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.412Z","timestamp":1791091348412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/c6c7cbe7c5388caf.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"122e4-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FN9qT9fgIE0Oexam4eqgaG%2BGSmAmNanPTgctcGqnXZdUSe7BguJgexEL5%2Bu6M9Ta22%2BRhznGqMAi4sGwiTILv1FUS3JUTnqiCjWTRV5Xf7hteBlPjbFFBMQ%2FXQ4S%2FLs%3D\"}]}\r\ncf-ray: a451bfbf9efc5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74468,"size_decoded":13694,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c92db200a490f7551018633bc7ac7f97","sha1":"696270977bb31456c840b5633850c446bfc61e47","sha256":"3d430b4769e9763b6cd52286adb424663081d110c70f29773c416b07843453f3","sha512":"b712401c407e1c361f91d070f21f69fd311d4ceb7b066f8e24e2aa67827ba7667aebb08b0c86f288b43068651281a7d678f0f78c101f7002b43b47a983a4f1b8","ssdeep":"1536:2+ysg6WNlUEe+wdPIzf39OM/hxTWg+96f43tRBwhJJGppDzBCYr2uhsTs:UNlU3","tlshash":"10739572a21aa41cf463801370d1a59d7174c297b73356aeea957b1bc2d32a32b737cc","first_seen":"2025-12-07T15:18:05.81794Z","last_seen":"2026-10-04T05:23:06.89823Z","times_seen":1150,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/2117-603ce227f12237bb.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.425Z","timestamp":1791091348425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/2117-603ce227f12237bb.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"1e633-1a104d015cf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMf%2FALTsjX3%2F%2F6ij6MKy%2FJdhitU1GJty8TmMcpXrI8oAM9VTw%2FSCl34%2Bdw1EQsQhzdEY8cl4LSi5cpdUiT%2FxXa3jrQQjR6xOv%2BRyGgbK7bOzMSpX7dWJTFp7NiTLl9s%3D\"}]}\r\ncf-ray: a451bfbfaf0e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124467,"size_decoded":32623,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bd99d7878c7e8888b6ab24e40ab69fc5","sha1":"7b304634632723e583517d33e34998346eab166d","sha256":"ece772926ce274f6d31508d891ec5fe44697a6e67273a5c359b17a44dc3fa2bf","sha512":"19be4f0c4789e62bb9d6245b21aaf21f87346f84abda7d1ab8661280dd9e6ab3c57e5fbe07b427e4cf03a6c00b14c154ad9f649989c1d16d35db1dd17bbdabec","ssdeep":"768:PY9P55e7wbSlPYtVDl//d9icrEAKH1ag8xxqKjj3fOpDKdlr/Na8MQr93UsGoROz:Cgw2lMWc3mY5jFdl/UPsibn2kJ51oCv7","tlshash":"05c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2026-03-03T16:15:40.652661Z","last_seen":"2026-10-04T05:23:06.900182Z","times_seen":103,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/9157-1ba04d5623695b43.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.430Z","timestamp":1791091348430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/9157-1ba04d5623695b43.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"26d94-1a104d015cb\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChLbomMVa1Ebd%2Byu48jqrrn%2FjQxjpeuXvd%2F2k971w4KGfovdf2TL1hgRqAo%2BHvmbI3ZfU4i9rMW5SW5aZCHpGGEun4UMw6nJUw4KhX41d2OEr6t9uz66iubYpR4AZ6o%3D\"}]}\r\ncf-ray: a451bfbfbf195693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159124,"size_decoded":48545,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d07df211aa09f7a327fd8f7536b1f0f1","sha1":"5e3565273ec641ac5cfd756f5a472cab88fb2fbf","sha256":"c9a61872f0519908e071b9a59fef73f722cfd24c6b3b2800b82a5d8edef6705a","sha512":"b80ff42d0aa35f0e369978332f8517e7e0b2562857f29ea136f000a5d64b77e978245dcff3bd007fe982155e6dc27fd13c7fcc3c65ee7a7faa1d76ab32d8462a","ssdeep":"3072:fexL57gsIi4o2r5pCJfqeaaUxWUQwA+SPg:fsLisv4dQJfN+WpTdg","tlshash":"45f307ad7115b02d4ab31abb40bf5807a87817361c0dc8b0e354f99e91fdad9616bfe0","first_seen":"2025-04-05T22:58:02.07516Z","last_seen":"2026-10-04T05:23:06.901752Z","times_seen":1919,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/layout-3c7cba712a5934ca.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.435Z","timestamp":1791091348435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/app/layout-3c7cba712a5934ca.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"ba8-1a104d015c7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLXlNjMZrcyYTFNv%2FfP3ukIVTJIEL%2FXnofXhFQMyGFAKFoBYHPOinWt5hKhdf1LHeOfpadKOEtIrpaQD4A%2FuY2e%2BeiEUVu%2FOA1t%2BOgADDlez8A1Z7zYRpIRDwyGw%2Fao%3D\"}]}\r\ncf-ray: a451bfbfbf235693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2984,"size_decoded":2049,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2984), with no line terminators","md5":"1e348b3c6a588862cc4b2d9dce85ff49","sha1":"0186fb2c2694321ce4a782ae7be616bbb87fc28c","sha256":"630d70176fb1c5010d9f44da40779fad365518af7499dabf8a8877a9e7e9c84e","sha512":"baa3d55d48d23e39576d83110cdef809d1b2d768b3045fe465ac8316cb72d03c86cb611b75199a1c8db756ecc73d980345c1f38862c439896ebb8e9bbee12631","ssdeep":"","tlshash":"3151655db2c9b4ba16f32164547fc507e0362776280dd495a235fcd12d30aedb122eec","first_seen":"2026-10-04T05:21:12.432311Z","last_seen":"2026-10-04T05:23:06.90323Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/twq.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.445Z","timestamp":1791091348445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/twq.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsZwU%2BTv045%2FhhH9vrDMDW0Tynet%2F27qIhlOkp%2BDnF0xakS3mZJXWNZfYwurUJVPTM3Fx54lL3%2BQ0A3vx5Zk%2Btdg3OZcZVshZQJM10S6EP%2FfSmM3TKsI%2BJ6wqhtUx28%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"134-1989632ac50\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbfcf2f5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":928,"mime_type":"application/javascript; charset=UTF-8","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-10-04T07:33:29.006416Z","times_seen":27511,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/header/gift.png","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.455Z","timestamp":1791091348455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/header/gift.png HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 12490\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"30ca-1989632ac04\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=empijV5rAcBAuaw91EAGfFJ8I%2BD2O2Dpq7hWAqgNAbFbZbUIXcGyzAuQtBm9HBKVUOZ12P1Sko%2Fzn6xBYnxVEwaxo4rASFck5THkpBl7sLFYGNnkSjXV3IndKbpOd1E%3D\"}]}\r\ncf-ray: a451bfbfdf345693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12490,"size_decoded":13137,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"31a8a252bfd0ca0186eefb2b8a30559d","sha1":"d614cfa98b129886dd95b6d523fa65fcc0d8e0e8","sha256":"4e74da63f844372e67b1f811dec7cd0c6cdc991ce8291884742be3f71f577c2e","sha512":"2c9a4d326191af68aeb7ac3d770fb75257d98f28d2d2a71dd21643754915566df9f35ba6ebac2b68ef572c020e6b6f91f1172998da8d309b9437a4ba752c1e14","ssdeep":"192:tdud/fwQtthiLu+1CJAlpWy7nAIxFLDkQ3cKHjs0MQfT+gR6mawj7RZUVl2:tewWthiLu+4KW8nNxlkKM0jH67wjAa","tlshash":"a642c0877a44e7062c10b5da843219ed6ebd38f629687c7064fe63a71202fd846c7fd1","first_seen":"2025-01-31T10:41:20.112018Z","last_seen":"2026-10-04T05:23:06.904718Z","times_seen":912,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/TTNorms-ExtraBoldItalic.woff","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.710Z","timestamp":1791091348710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-ExtraBoldItalic.woff HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 34680\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"8778-1989632abf8\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx6W9Cq8Yc7XemK%2FgwZyXtSUYE6nyOP82pvc%2FH5CuxkJ78KrjlGHIEDK7QErO0Y7DkREh1DpNsmAPeq7yoHaveeDv%2BpN48VeOYzOqgaWoJ1aWiXIXXim%2B7uVWFUmTqY%3D\"}]}\r\ncf-ray: a451bfc1782d5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34680,"size_decoded":35331,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34680, version 0.0","md5":"9a30e8f0dd95fceaa89cf08605ea7236","sha1":"1d44d7d9c95c173576f844b081ce9300873099cd","sha256":"8adb6b1b4270089cb85b970e5f1a9dafa6187d864534bb55a3f9775b4b957528","sha512":"86994026ded042339e8157d7420f31e3757dbe6681b3a49464e0b5a4c09c77e6be757aba86c2045d66b72cd9f03580cedc452f178ba794ff2637eb4e0f5d2f26","ssdeep":"768:nllcp5nxgKPVOT79IHkwzRYyQSL0tSBf5BFkqY1Fzd9:nll+yW0m1Qs0q57YR9","tlshash":"eff2f1729d657d209249a579f0fa0e9c1ac8732a7133c34a973eba39714bd70b03761e","first_seen":"2023-11-04T05:15:18Z","last_seen":"2026-10-04T05:23:06.906971Z","times_seen":1919,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/5353-d8888e459d0d123e.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.438Z","timestamp":1791091348438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/5353-d8888e459d0d123e.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"3cf2-1a104d015cf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aRIPSgGc3FbtdZXXYF5cOH%2FFgFR2yS%2BS1dpW8jKVdZQa1BBlqz6kaZDKwEu0lOEHHzEBv%2BcD8CLNgmeKJ7U4jIMvq6eNInEc9d9%2Fp9mZRn1OL9TMTfdw0ZgRbsvCV4%3D\"}]}\r\ncf-ray: a451bfbfbf255693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15602,"size_decoded":6324,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15602), with no line terminators","md5":"fc61d7ef60504a2f5fef5b43fd53e2ae","sha1":"80bbd7890ab251264753feb976d58bf471bf7217","sha256":"457fb993e9c8544b646cc0b8f599cc88f5a63336c700d17da2cda5cd79a5968f","sha512":"e615c715ebce5a84cefa043a47818a84d9bbfda95716b581dff806441665ae419271190ad835faf79805c31287ec3a083c0df5357f1c32806846eff2f5d63a84","ssdeep":"384:tpWv91E0kbfrT42FPpXAhjyXmP7TivCOqX3rXWXvX4r9gYxRxPzr0Ag:HWvHjkbfVPpXEyXgTpRXbXWXvX4r9g+Q","tlshash":"7662e8fca3f458e83a479f74c46f600e713b547daa5285d9b678acb056141e87702fc4","first_seen":"2025-10-14T22:47:35.996421Z","last_seen":"2026-10-04T05:23:06.908459Z","times_seen":789,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fbq.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.443Z","timestamp":1791091348443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fbq.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g42DHHqcJ2nPRsFJYNQUUMZomw3dbLK8rRSM6CMJgQBpERsoyznEr5WBbWOwdNuvVBNRZAEMc84wLzuAGr%2Fht4Yiq%2B1L77YhOrRznhkCci8wjC519NYgKJihIXtKAGU%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"198-1989632abe8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbfcf2d5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":971,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-10-04T07:33:28.99209Z","times_seen":27522,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/footer/crypto/tether.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.517Z","timestamp":1791091348517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/footer/crypto/tether.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"ce6-1989632ac28\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ad%2BPBxlWhzaCcl9MPq6hFN2PynP2AtXxobxdihgjWBeyCyvrS3S4824TfxP93UO1n67VqNfoiypcB4ex5LrkyFZ9J2dLGAUwal6a3vPg0EAeVgdrx43Oc0L3%2BUZp8M%3D\"}]}\r\ncf-ray: a451bfc03f905693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3302,"size_decoded":2113,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38bf6661e9159a798abbaf8683b60523","sha1":"a3c4f6056949c83a4071e1c04feeca9c99abe772","sha256":"93cb3ed8fac833b261782f10f1d6051eda8413a2bc3da772cfbfbee4ed91b092","sha512":"4531be5220c4392e5ea419d856cad18bb1791486318f5977f0961ace0488f6dcfcf21e53028a5251b51070e017a30d5123d9811f7b7cd0cd01a20715a1cdde0b","ssdeep":"","tlshash":"e16174f47784a2e0e487fbf8cb1971f6776334fe3a61d41ace698d95a60102d88c88c0","first_seen":"2025-04-11T21:37:07.807083Z","last_seen":"2026-10-04T05:23:06.913609Z","times_seen":894,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/TTNorms-Regular.woff","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.682Z","timestamp":1791091348682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-Regular.woff HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31112\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"7988-1989632ac00\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTSqrIcrKWvQtjsTmfjkGokKFhpYXvXNr%2Fn2CcN1w8HJ1E%2Fah2ezN7QL3x%2F9WAb9m%2FNTNDuHSm%2FPgt4ZZLMroF5Rq0Cy067UeB%2FQg%2FaMbWRLnteLIP%2B7EwDsc2m7JvA%3D\"}]}\r\ncf-ray: a451bfc148125693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31112,"size_decoded":31771,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31112, version 0.0","md5":"33f150c6ac81219f18b55864e087dd12","sha1":"7e3f9fee0b08c64fd733aaf64029c2947130b9a3","sha256":"0d9f772dcc9cd484c98410488a12c0865b31531a79e8e9c1926945e7b5e66a95","sha512":"d014e3e7ea7dbe8f123c1cc9fed70c6b8ab5cb65703fa2d04814c640c07521b94175c5830eafe01b67c73881a9a1f374231279a75285ac9a4e62b32ab0158139","ssdeep":"768:MA2xVa+8iyIHNUTmc5XZ5x39iaKiR6TMYB+qOk:MA2vz8N5TmwZ79ZptY+k","tlshash":"aed2f18f626c12dcf970e4fea2e217cd8745347de13a4665c646d0cfca61e70ed88219","first_seen":"2023-05-07T16:06:45Z","last_seen":"2026-10-04T05:23:06.914261Z","times_seen":1975,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/ttnorms/TTNorms-ExtraBold.woff","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.716Z","timestamp":1791091348716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-ExtraBold.woff HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31164\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"79bc-1989632abf8\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWJ5mCSXPSDNpy%2BkorAFZvhSz433lUTt1Xj1%2FAr7J2fqtg2wE9w63Ar9IPR%2BrWcEXLn6s2rqZN%2BuHHvIzFLK5I1EjM8YADOoXfgc9Y%2Fk83thuC8DplYZMDWt9m05GmE%3D\"}]}\r\ncf-ray: a451bfc178325693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31164,"size_decoded":31817,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31164, version 0.0","md5":"faff73e68bc9c9a5ff7aae218f486e27","sha1":"b1f5211fecab2b9ea1bf8b53ed244576ccbec094","sha256":"e9f58e36c2ba0db27b2fe97fb0e66b5fcf342caf300b40c1ca7589264cdb2ede","sha512":"d58ee0956cfcc227485029f5adb6b12ad5768ed8332223df7fe37ef065b748c75fd34e11b1ceed220f9290830678007e39a0b6fafd5c44d495768d4beefbec89","ssdeep":"384:fsOlrrhIBNFH5j5iue6SR2S8ogtg12OvL1xFpM9hbKeumAOhCXt9m/HFqdSmLrg+:ksYLH5j5iRwDg12S2WeumAO4zRvc/6","tlshash":"64e2f149bc2b9f41df6e1fbb05502f1171d611ae44acd28e19232c0ad8825b7b07aa7b","first_seen":"2024-12-12T16:53:28.022528Z","last_seen":"2026-10-04T05:23:06.915021Z","times_seen":905,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/app/not-found-c6f495871cd4d31f.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.434Z","timestamp":1791091348434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/app/not-found-c6f495871cd4d31f.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FQ3wg2ZTl8p83QMrnVLBsKXf4BLtz6PJgv%2F6Dgyqj7quVVh9tk3XTlINbKaXpO9MbyjHDhyqIXI%2Fnl54Y0sjjssTB7Uzqsk%2BTf3%2FeizNkK7oqA%2FYOZD3m236ywUlZE%3D\"}]}\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"33b-1a104d015c7\"\r\nvary: Accept-Encoding\r\nage: 118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbfbf205693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":827,"size_decoded":1215,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (827), with no line terminators","md5":"bb59f39552e209c76a7d649009032b57","sha1":"5725326a1b2c77ba9a76c9e7287e891473aaada5","sha256":"eaea74d0499f8b1b2c36f7ecd1378cd10563b34045086447956d3acdcf770297","sha512":"7a15783703be8cdac8df8d7a6cfd077ae4bccc03d57f62ceab188b41900d97394bca6a436c78e0f5ce8e18f3461db07fe172b112802cbc05fb1e29b784cae830","ssdeep":"","tlshash":"f201520531c176d8b5136cfc517f9809316b2698408e44b2d8b6eca12d222ccba43fcc","first_seen":"2026-10-04T05:21:12.42487Z","last_seen":"2026-10-04T05:23:06.915763Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/0c973de4e2fc1e14.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.409Z","timestamp":1791091348409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/0c973de4e2fc1e14.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"707-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmaex9nBu99w97y8GRYhzdMpmijvaxpOuEIHmAF9mjGpVExaBVmkKk%2BN1FCGHW7mKBgdu70acWf7i%2B71NhcR3B14AQrkaocLwY%2ByZY6wHoVt7kU2cWAMSBiUSJwOoXo%3D\"}]}\r\ncf-ray: a451bfbf9ef55693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1799,"size_decoded":1400,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1799), with no line terminators","md5":"296fba201c130b6b93416c13f0f0cc8a","sha1":"4d40444f295f7258d33950d34ee0e5974da61a24","sha256":"dd8109222fc020762b769c0d87d0642086837dd54e885a1bef4e18b316299b2c","sha512":"34ad6c14c0754241feab02b05a75f6b18e5a5fb4af966cb4a0ae0108e542d38985a7a497c8512a2d629c5e1f2021fd1c1c88eddf54d7c19d3ce4a72e8053862b","ssdeep":"","tlshash":"3c312c4d54462e68e1878b1a7c61633d14b9b0ceebaa2a0d86ec773043d96e220e97c4","first_seen":"2025-12-07T15:18:05.796833Z","last_seen":"2026-10-04T05:23:06.916532Z","times_seen":1148,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/main-app-df523c8931f70c0a.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.426Z","timestamp":1791091348426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/main-app-df523c8931f70c0a.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQujw2a0PL2EUZrlXXCaVtTMZcVTvvVfzB3nwJc1SSJEstROM0z9H5ZMFIqKq7R9wTEoLL8aFNNsJhkLSBQsDiZWlO2b5c4Nc8qNC3HbXx81%2FbWq2aWrT46YEcZxvc8%3D\"}]}\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"1d0-1a104d015c7\"\r\nvary: Accept-Encoding\r\nage: 118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a451bfbfaf115693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464,"size_decoded":905,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (464), with no line terminators","md5":"780f1f062143f470ccc751e8e9d0ba05","sha1":"c9deba27d87d3e1b411b741a1d7249479fe500b5","sha256":"82b916c2ff6e9ac8cdc115f596700aff44c67c4cb3fcae2c6dad80a6baab40fa","sha512":"77205548712b78834d6277e82f573ab652162e8daee458234ee877477cb98410450a7465d681c859ae71bddc4a2d40249260d3a9c8f7f34a7e9eb5010279aaf4","ssdeep":"","tlshash":"a8f0129a2a4c742f2913ad24fdd36c2e256e916028a759501a14ddb12c736ac93f1c7d","first_seen":"2025-01-31T10:41:20.167782Z","last_seen":"2026-10-04T05:23:06.917315Z","times_seen":1937,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/8003-35d6c4e938d60f65.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.427Z","timestamp":1791091348427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/8003-35d6c4e938d60f65.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"1bcf-1a104d015cb\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oP0%2BHvbzdnyzbPtOZxw3fJnnGnBzU7eN3szLOnyY9QamXz%2Bf56Udx8RlBOfcdVVFmaToyKDjAFlmk%2BGkkx3i3DdoRuZEQfrmj%2Fug%2BQo%2F4X5xJ8uVj3HdGzzFrnszNKs%3D\"}]}\r\ncf-ray: a451bfbfaf135693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7119,"size_decoded":3285,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7119), with no line terminators","md5":"8014900ea0b06de9aba6c034a95c2e68","sha1":"f5f9791bc97c1a2973734e6999868eb15e2096e1","sha256":"bb2ba96a789f1f0c6144a6d6ddba4a09c139b4060a1c9e97af56538d29415c2d","sha512":"cfa275c652a59e72983c88b3a934681c6f29ffc87c4c99ce4a55137b1f5b0cd6f011d8ea93cecdca39f82ef3f2049fdebb3465a52d80ac6887dbf2ea295ede80","ssdeep":"192:cQkUmrphg1A1ZfGVYOw/39aS2wBgrn0z9bjcjF64KGUZbczUdj:tm+EBGVo3kSicbyp9a","tlshash":"ede1e9b2b7d4fd35135a44d484378247b6542e37601e7080d3fa8cea62b8dca85e2f8d","first_seen":"2025-03-19T10:41:28.915816Z","last_seen":"2026-10-04T05:23:06.918473Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block5Mobile.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.510Z","timestamp":1791091348510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block5Mobile.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21220\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"52e4-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4kAEwUPZpo2KkJ1FytSCT9gt%2BqGCM%2FO%2FCn79TxP7Wp%2B9CrondBHIKkjMl70%2BYwvTQcyYEpiMckRZIbzTLFyrJr71H6hqu6pOt2rFdMM682dyspZH6m2AAwhNNMhPjQ%3D\"}]}\r\ncf-ray: a451bfc03f845693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21220,"size_decoded":21874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c7fe573ca47cd563c79920b4f9c262e","sha1":"d33337fe8dd023420e98e164d3744679898c5e1a","sha256":"597c551769acbbb8aac81167c78718c2fac6dde65952a7a7b2925d38ba0f87dc","sha512":"c778e0c020face244b2c2c246513ae0565aa5d9773607ff4e8c8eef27cf966a215ba4682c1fb68e08fedc45dc19e846c6bef2ae37d5bba254f9dcc7b5016d310","ssdeep":"384:kkI81KBET/Me6fMz1KPRqcjLWxDOPeaj5CQnHqErz5CVKYG5njHibBynqnk0U+fL:LI813/MVfMBKP8cPWxAn1HPIVBG9HKyM","tlshash":"6c92d0bd4889c9f4a0ebdc27e80d7ba2484cc7ad270b6a44d2db60ccb77218ba55d515","first_seen":"2025-01-31T10:41:20.133561Z","last_seen":"2026-10-04T05:23:06.919722Z","times_seen":1928,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/footer/crypto/bitcoin.svg","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.514Z","timestamp":1791091348514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/footer/crypto/bitcoin.svg HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"215f-1989632ac28\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwPivgjWaO5qJya8b9Jc%2BPZ70s3rKqN0%2B8ONm07CfbSq1zxeISPKI7CT74laEWfQoQ7f5GUaufCEVvMKOxmeYNoqIMfFtbBKkXk9Gn5lEvMwvTLFDRxJphX1%2F93%2FWOE%3D\"}]}\r\ncf-ray: a451bfc03f8c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8543,"size_decoded":4602,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2ee33551dc7219a1fd1b0bd5b1fe28c","sha1":"317b64e85c126f28476cd453e48d0fbc8e81ab23","sha256":"2a5bd08f0317c683b66e941df6f557b7b6d1217f9d6d6bf43b52662e11d16b84","sha512":"8bc800e4ff4df2b4849055e4eccd6412d4d91f5e16910a1111c7c970d3a8d4db65e5e184ff99545e54a7fe7d674e786e7751bfe87cd1d086135e11312c6ab86d","ssdeep":"192:vstj4tJbijZqYBQWsw66uIvJnEPcmuFEPvyB1:jNY+fJ6jqPsF+vyj","tlshash":"3302f8e873a992e0f402e7d0da2654397f0f24fa1fa6c6a9c3950ec4da1107dcea5cc5","first_seen":"2025-04-11T21:37:07.816481Z","last_seen":"2026-10-04T05:23:06.920437Z","times_seen":894,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/chunks/1651-82e1e744355e48d1.js","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.440Z","timestamp":1791091348440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/chunks/1651-82e1e744355e48d1.js HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"362a-1a104d015cf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00963l9qeKNjsEKBqS9cmzU3sH%2BGzBYZQAOWBbwO3%2Bl2%2Fjpqg9mVNYdVf94f1EiujOfwyud6CEfshY3k22qmHn5Jf5hU1Gqc9OaTWnapG6bMJswz1OnfbTyDU%2F0nJrk%3D\"}]}\r\ncf-ray: a451bfbfcf285693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13866,"size_decoded":5808,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13866), with no line terminators","md5":"40ac3263cb099264944011545380bc2d","sha1":"4987655d55aefdd9f6505eac8ce3af02abf0da19","sha256":"bcfa96af03f753fa7da9c21379ce4dfdc1355c70269b6eef3081081c7831ac5d","sha512":"d9e4a42e99ebe60251beede2f57a031f55be28390b32aaac658f8ec2b77e996ab817b20b57e129924c9bbe99f72ca46a24e7756d4c0a224606dd90a10a2d4f48","ssdeep":"384:XiEoLx1+W2o2mQvNNLkVohPc7W9fDepafM3vqLuNV2VGgL9PpX8FNiEzi4:Xafb2mGNSVohPcSkp8M3vqLuNV2VGgLM","tlshash":"e352b669e3f897c0da7d4b6451eba05fb27f3798ab028c94e6685c14a4a54dd3b00fc2","first_seen":"2026-10-04T05:21:12.465495Z","last_seen":"2026-10-04T05:23:06.921724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block2_2.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.466Z","timestamp":1791091348466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block2_2.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59542\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"e896-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Xm4PFmVKuKtAZGQqG75CHuckb6AjDIVQ52nsXSVPChGJrjwQrYH0aHodHo64NMpW95gtLWDf9ijryc3KyhUj8uwV%2FDMWNAGKgzmHsBY3LMt8vV1FvuoKr2XGwjS%2BoY%3D\"}]}\r\ncf-ray: a451bfbfef4a5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59542,"size_decoded":60190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e84373a6466299fa094ba5363b7b5611","sha1":"b664588840cddc484127d918b9e723a7150ae1fd","sha256":"e40b65c3cb0a0765e299a82e05a7b5e093eea9997af4d8f09338efb2e84a2ede","sha512":"1d376cef3ea264b8e514e7e14b2dab5abc77d9ee59c92a9825df43f0ac98eadc7112c0ce2a37b5bb393947dc31bdcad4a96dcf284314939a07301ac9578791bf","ssdeep":"1536:g6eq9+r8Cal3xQkiJSGZWJ2KsFMMoL4FT+5n:g659I03xQkwUJ2K6Mn4B+5n","tlshash":"db4301a2dbd65305efbf4f8e2163161d586f842a37c3676d4829a84a33185f11bf4b0e","first_seen":"2025-01-31T10:41:20.12249Z","last_seen":"2026-10-04T05:23:06.922509Z","times_seen":1931,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/_next/static/css/2b3198649a078c56.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.420Z","timestamp":1791091348420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/_next/static/css/2b3198649a078c56.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 04 Oct 2026 02:48:28 GMT\r\netag: W/\"7a4-1a104d015d3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XllOPLWs10sBBKzEsmjO9Un0XvCDguxgE6dIS0GmlmRtlk5pLLyxEGXvDmAm%2FFIm0aQ4pbLkE9ZLiokaHPj5Af1WLpGL7IxVW6mgUXqT5KPzXdFGEWV81D1Tk4Ys%2FaU%3D\"}]}\r\ncf-ray: a451bfbfaf075693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1956,"size_decoded":1417,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1956), with no line terminators","md5":"a40a0db04beb37ff985968da200beeb9","sha1":"43599a6376c0e01d48e68a6a16325b01def3191a","sha256":"c6ce83ab109eb73ee51d309e1b8996660a62a5a0b9b724b54bcbd31dba3bb9de","sha512":"1047d3271e96383f0a382f426e4d3de0d6e1e62adb2ee6db4edc9078fe95d616642a4f6bbe969c27151abc35c09f53ebb8b8a1476bf8856ce7be043d758bb925","ssdeep":"","tlshash":"ba41dd712044226cf4d9a09af406644f75c1892ae21328b0b28de4acd1e3ef7fdf13a1","first_seen":"2025-01-31T10:41:20.175967Z","last_seen":"2026-10-04T05:23:06.923126Z","times_seen":1911,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block1BgM.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.460Z","timestamp":1791091348460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block1BgM.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30510\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"772e-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xr0sxVkkodClEUK4gH6AiQHI9Oq4ZQWx1U3Sp9E9cBbvyQAraRgOg4PK1WI4EC%2BxkBHLrFEKACZfKGYmUxRGZWu3XrGv0OeALvHfPAg1%2F%2F32zRMK5L6tykxDq1sMzeE%3D\"}]}\r\ncf-ray: a451bfbfef3e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30510,"size_decoded":31160,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1d26004f83735bd2521a49722ea6c06","sha1":"6eae79b2d1c8a1539bee33abae3ee09825468b54","sha256":"7a5783cd7895fd743a8efa30ee7de9402deedc294d8eeb71ea22f676b787ea10","sha512":"8cc7a3b942340c94f55232e222fc27cbde7815ca763c483ae770397d3f46b5fe49d2db9f2daa80736f32caa1eb9996b0c4ea08d05fb691b29083b7d2a6032601","ssdeep":"768:SYZ9DOJNKHAYuYgmHR9NjvFwyaDtATAFSUt:XIKHAYuYvHR9Nj9Ba5A/U","tlshash":"3fd2f18c066ff44c505ae723823d4f4917df885e963c355a8aa78335a4e9e136c8f53d","first_seen":"2025-01-31T10:41:20.119302Z","last_seen":"2026-10-04T05:23:06.924647Z","times_seen":1930,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/new/landing/block3Bg.webp","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.467Z","timestamp":1791091348467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/new/landing/block3Bg.webp HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31968\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"7ce0-1989632ac38\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cO8javAFVpLxttNXOIAxlvYHAdiE5agEctdZ0Ittj7dQLXM8G2x%2B8AadGubtnlmoVY%2FcGVNqeaXzHwwPnKKn7Iqmor6ZuwZi1kljfL%2BIs2QRk6ZS7odIpOPsi19TCNE%3D\"}]}\r\ncf-ray: a451bfbfef4c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31968,"size_decoded":32618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e48516d30fc0185a62d4d44782d7114","sha1":"8c8de6204cf95cb371c8181dfa68609b82874802","sha256":"9f65b5f84da360952bf621b40cb8c01719e3d66f386154fe73122a06eed3e5f9","sha512":"ac57b94a1412db4893f4cc5bbb7208be9d486d6cd3acf70ea19630ba10b129f53abaf058878b5eb7b4a1e64ea87bc0d845fc268decd470e1fd789a206ea1b08c","ssdeep":"768:Yq/RYKrxOSBsYeXstjo3Tac9jHQna6yFw4OoxkEg1nTRo0msG0:Yq/RYYwmeXsO3BjODy+4OmkEuTRFFv","tlshash":"bce2e1453b945006d1eba9ac050fcced827a5ceb8a6f5427fd161a94cb3b220e7028db","first_seen":"2025-01-31T10:41:20.127884Z","last_seen":"2026-10-04T05:23:06.925883Z","times_seen":1930,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winonevip.cc/w/fonts/source-sans-3/stylesheet.css","fqdn":"winonevip.cc","domain":"winonevip.cc","tld":"cc"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winonevip.cc/w/","date":"2026-10-04T05:22:28.579Z","timestamp":1791091348579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winonevip.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 11:44:27 GMT","end":"Sun, 15 Nov 2026 11:44:26 GMT"},"fingerprint":{"sha1":"0B:58:57:2A:B2:66:9A:A5:39:06:F7:DC:FE:C7:3D:B8:99:D3:7E:29","sha256":"83:CC:62:3E:0D:12:CD:49:F6:BB:33:BC:7C:D1:3A:EE:E2:15:23:C5:C5:40:98:F2:9D:05:84:6F:D8:9D:41:7F"}}},"request":{"raw":"GET /w/fonts/source-sans-3/stylesheet.css HTTP/1.1\r\nHost: winonevip.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winonevip.cc/w/_next/static/css/0c973de4e2fc1e14.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 05:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGKdmow1RE%2BXTh3ZuTVMguap%2BJ74z84Je0R92KrIduJpKtHUV%2B%2FIAdIuktnwqncTpM4WRV0BxAkPEsRrCErlHvn18QZSN1Z6nvZxWjK1mDGxJBBQFLGhT70DO2YWLu4%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"294-1989632abf4\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a451bfc09fc95693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660,"size_decoded":1024,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"dbe63d040f877b29c93289369d94d3c7","sha1":"983aa9dc8ae17a825d82138b21167124c6c2128a","sha256":"0ab7066382f22c741f2b85472fefd6988bfae08a8e615106e9268dc7c924a3c4","sha512":"051224a8f79de3417756412dd45055e43aa56209367b7c976fb3987f9088161d8967d73bfad67ba92766968d113baae4a289dbbe723f05fe6a92d1ef3429e59a","ssdeep":"","tlshash":"15019923426a1a7072204958bf5ee663be7c080bb3a241baf93451000db2d1903cef8e","first_seen":"2025-08-11T12:35:45.427412Z","last_seen":"2026-10-04T05:23:06.926497Z","times_seen":1516,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"winonevip.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}