{"report_id":"74a2c4e3-5f2f-43e2-a106-15bdc7a9ab66","version":6,"status":"done","tags":[],"date":"2026-02-01T20:03:37Z","url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"title":"Vuxwin: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling","dom":{"size":343796,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29625)","md5":"98e78612bf9d44cb06457980f680ab4d","sha1":"f81d09a5deede68a410c3172cb00c805abfedd93","sha256":"07d077ed8410317049ae4d83d5b07f993fbf2aeb0c4e1c36c2eb7746dc9d0df4","sha512":"83e4f2de949e64a8da61d3f1eed27abe3a17584c826be69a5892ce2aca5201bf4965eb8c2ff7bd9dffde21f14f30358d5abb5f07be133ca52777a998ea2b4f44","ssdeep":"3072:po5J0oIbgNVcyhcmL8KOokSo/7nTAVmCtgDYyD6M/2yT+VvzrhJUo/i2/8GtDj:pSPIbg4cLIQTn","tlshash":"c674082de402da69e4674ded317eaf7a918ed637ca63886cf3dcc5a403868358f915c0","dom_hash":"domhashe25cb88ddd2380b94c18dcb83a30608b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T20:03:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"vuxwin.com","ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-09","domain_rank":0,"first_seen":"2026-01-31T21:22:31.641807Z","last_seen":"2026-01-31T21:22:31.641807Z","alert_count":410,"request_count":205,"received_data":9430080,"sent_data":169823,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b10f9b9006411b6afcb5843e7c57c31d","sha1":"a7731eccb8b59abe9c0743003d304b3453e69938","sha256":"30cd123786f0b612a543aebae24a5dd7ac167190d35ec78e66c949a4ce868f44","sha512":"e5f863b39ab02a5072a1c5087569aac9fd79ead2888c61dd36312cb32910bc428a2aeb691f194bd3444c3ff6c6e146b26689ec519b06c2100864149bcafb8671","ssdeep":"","tlshash":"6ff081f47452f9a7c5a23424013b7f17176f110e75089810d71fd154573aa3b8393a8e","size":573,"data":"","first_seen":"2026-01-31T21:08:57.386599Z","last_seen":"2026-04-28T01:10:54.359165Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bcb1c2d55c0083132bb30992f30ba5d","sha1":"e1960e589026ee8b4162ad051970a58fd79d116a","sha256":"a52eb7d5fa30a4955c6b9261438d2b878664904b4e3bfd22180672d57f7f36fc","sha512":"15b7e90d2e64edb47c9fe9a406003baf411d55f3249ddbc2e2c1dbc8c4700fafb11c498885db8c5b1d56e2d1af06ff86565dcbb2c803739c4c2ea8b49a72f3ea","ssdeep":"","tlshash":"caf020344b2c102207e808f9c0cb85ec393d72a2d018a4a0f869ea792c548bfd163edf","size":558,"data":"","first_seen":"2025-11-12T06:49:22.766105Z","last_seen":"2026-06-04T20:17:33.250986Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-06-08T12:45:29.039378Z","times_seen":52963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-06-08T13:17:14.854934Z","times_seen":39778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4b5fc2a2cf150c41.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a2db0f51ceee4b64dcf2f34b7cc5de1","sha1":"9d13515ac8e3613937c7e41e704ff52760ddf473","sha256":"3e316fdf81283e8d0d6e95f67225560ef3c1c3b33230192de20cd9a9516a75f0","sha512":"80ac75dc3f6084d84660a5bc6fed6ae94440a6018061ed1fd18289c226952ec56b4790a8d42dc197cb5277edb1596fe26baeea78de76d04cb07d3f621a6657ee","ssdeep":"768:PfCxyEdRqNnKG1+g3fA1SjjDrxEBK8mO2V:3GyEdR2KG1FP","tlshash":"78d2b66050457abcf56708a8ba6dc40cb11eae6cc70fcf18b57c7c253c5a9816d96f93","size":29517,"data":"","first_seen":"2026-01-31T21:08:57.196019Z","last_seen":"2026-02-19T17:02:28.856281Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-06-08T13:36:38.097549Z","times_seen":156397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95fa3942230da52eea85aa98acd43c97","sha1":"3d533cb5b7db33eadd80836d3d43c9189ff6d3e0","sha256":"51486445f6afe27ced0ba0a7243ba591bca8c0139c00a397f7017f7c922575a2","sha512":"e9b618c4e4267b5111b8cf6dd75c06477b08323c255a8c7ea25bfeb0b3a24cb30881dffcc18b06d2ac631dfa45cb04f9ad631e0197fb85c25cf2576877386797","ssdeep":"","tlshash":"59411d54f40ef9b16852de0f223a4e3584c49ef9d271d588f38dcad642c35ba439968b","size":2291,"data":"","first_seen":"2026-01-31T21:08:57.389508Z","last_seen":"2026-02-02T22:33:10.222291Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","size":29045,"data":"","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e4478b18797a33ff3b900ad275c4356","sha1":"7721dfb1d4204a30b7b5cae2df91f1f4ff128ed8","sha256":"0aeffc99b73afaf73f638f7a6f29d5503cc0a05eaa099ad298ec72767f80de78","sha512":"3357a475d80602007b9badf32ca7113c8c099e8f1f52e03d5a376c9d7ada914d884f1297618a989c40b9e6180e14afef7955219180bf249852c6d2602dd97748","ssdeep":"96:Lg76kMyEYXSYWNYhs/sB5k0RZx20WbWVCydv76kMyEYXSYhHwV:duSyAaQV","tlshash":"50b1bd3d2002de4eedab2e58517d8c39258dc97b8726ceb8c1d9ce315a8a07867d69c0","size":5284,"data":"","first_seen":"2026-02-01T20:03:45.259094Z","last_seen":"2026-02-01T20:03:45.259094Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/surveys.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","size":88854,"data":"","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2870c37277e2b061986ce35bbcefc5d1","sha1":"f37921f74015e08ee0625648ae697de9f4c11a4f","sha256":"d3e1a6cc1c55b4d31e8521c79dfdceba78bec28e85147d89292e00beca6ce9a5","sha512":"1367f9b658ba79e40cc32c66689930097ae53b72e9bcf4167bcd6eb530de9b79d78eb84e75e64d576f44882b6da856c70363e900089d67e20f787dc57e93fc69","ssdeep":"","tlshash":"11513e2d600aed0cd8ab5e5e013d5e3655cdc97ad766ceb8d29cca76424a038a3c78c0","size":2946,"data":"","first_seen":"2026-01-31T21:08:57.391699Z","last_seen":"2026-02-02T22:33:10.224804Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/70c45d6675f019b3.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e4d5a794242786c08814a59b6087c05","sha1":"55e62f84a8ea8c87096aca0d1e7bec8432cb2925","sha256":"3942c67ee2f3aaa790da9ea3bbf05ff4fd6fab0e3e292b1b46288f6f9b765960","sha512":"0e88c83aec048a975629f2fabaaccf9a988a2937b31d97f61df802dc12ef4ecb67bcdacf1838e34ab8dfbf344aab5dbcb384f6df8e5436634e5c25e2fc43d99e","ssdeep":"","tlshash":"d4119baa7aa6b46673b62174803bc507f0346b32184ca4e0f17b9ca03934a5e7e02ce5","size":1000,"data":"","first_seen":"2026-01-11T01:55:53.614058Z","last_seen":"2026-02-12T22:13:37.99537Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"933682ec098a27832d260e61f8260676","sha1":"0ac5c9c38e3fea3e6d0e130214cdd6d2e5320589","sha256":"ab6f2925bef418c90d646c90bbc67f787cad8a1e24047eb5301154b6efe4c6a0","sha512":"da7fedac24b8f0fd363aa084435d5fb90cb1399fada749a35ffda540be9944d11869570f66389dda6f8c3f0d5e6b2750cb7b00f192f6976ab0559726a73a5898","ssdeep":"","tlshash":"5e51f03c2016da5de9ab2e18117d8c39258ec97a9726ce75c2dcc932554b078a7d35c0","size":3136,"data":"","first_seen":"2026-01-31T21:08:57.39267Z","last_seen":"2026-06-04T16:54:27.261575Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/96f87de005b2d6ad.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17eee88a9831d2853d077fe62f93ae7c","sha1":"b04fa48c468a9688c66373657e1465eaa00e7a80","sha256":"8846cbd91af5225faad20ca5ed7991bb165ad456444ba4e344461fdcba871828","sha512":"755666295f002303e0f46c2628e8f68d3de5cede59b52ab09ac12fa7b8813e130e25d90e2bd07e8a23225bcbc995b428e5631e665dcf67dd84649e4f1d6fafa8","ssdeep":"768:bVoeIOqOdU7FKN/HtE228zbG0Muf8cAyHHyhXmlgXR9DmKcxEeZD:bVo3ObU5W/NEH0MJyHShXmlCDtLeZD","tlshash":"75431999b111b87685df92eea05b14ad733daa0cc10dc118b97f9cad232c5e4b153f2e","size":57659,"data":"","first_seen":"2026-01-31T21:08:57.382489Z","last_seen":"2026-02-19T17:02:28.740655Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/op1.js?v=1.1.3","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-06-04T16:54:35.410859Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/2349889433227e69.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78bce7ce7acfc3881e181f458e56e281","sha1":"31b0a2cee84238768b19d60f5bbe95073f85f927","sha256":"bb5a1ecce51f1568ea7b8136da53386bf996288fcd864ec646ba176b5b858af0","sha512":"3dcc827162e8eda233878321092245d82f2eb30c1f09cbeaaedc63426ff11efef495f99064aefcb610277b3bfb0266890fe6ebcfa75ea538d8d58f5c55f1f96c","ssdeep":"768:giSpd5w4FuUe/y1xxzgxk93gtaKoYYS221frDQUkP/M6+rueVutcc9m4V:ZYAymxktgtDDQUkP/M6+ueVuZ1V","tlshash":"dc636c63324228f65bdf42c6e02e8606e33915d6900d4124f7aa5c3a5b61fe890e7f2f","size":68403,"data":"","first_seen":"2026-01-11T01:55:53.41201Z","last_seen":"2026-02-19T17:02:28.846589Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/e3b0cf32d3668e3e.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e5379c1bbfbb186f837f831921c4f13","sha1":"e3b42b23015fe4463332662702dcbdc12efd3256","sha256":"fc40324411b1ef5263ea87012729f52d443136ffc93caa8940b43297f86b0c25","sha512":"45334f3cda20eedb7c3304206c9ecda79b42979634544f7eb54ae9b6fc8ad133e9b0cbe0dcc15585f769e74d50e0bbd599f8a2b5fa43a1a3d844e250053185aa","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlDE3BkefskEJ5sa:cuqu1gk+eUVkX+W3wCDENfskEJH","tlshash":"bae2a5e63602ba73e3dd01da50b64459e37e255e2009402cf97d5cae3a78949c0ebb7b","size":32483,"data":"","first_seen":"2026-01-31T21:08:57.293702Z","last_seen":"2026-02-02T22:33:10.107202Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbcaa96b6157551a8c8c0c2b7f08e5ec","sha1":"a2e0ce031aabf512cd5ad17b90903c681a131c87","sha256":"2e350167097b057c9810dcc2436e9451c304755a97c6c75f2c15b75a2755b7c1","sha512":"122c0d1a67e85e4b0fe0fe48b89e6c81ff53d76bbb85d9e2445c662659ac9b31223a46a9865093245220758535843460694d81d7f333e62b1fa2ca09a1eae722","ssdeep":"48:LSJtLaXLdAul/+1jCQQ1iSa6WHgOkxpqu8wQDIh0FmrRiEWn2iD6RVLNIcabbW2k:LI8LO0BKuxdWG8heT","tlshash":"a4b14a0ebc19db019d3aac7d023b9f7a44ccce73cb61d969919fcd490a166f21be8841","size":5463,"data":"","first_seen":"2026-01-31T21:08:57.393482Z","last_seen":"2026-02-02T22:33:10.225905Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/ad138cba44450f34.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ffb96341f3b620a5370514b73e3db9","sha1":"2451d15feffadad588466305f4a236f382f45e70","sha256":"a9efa5c83a5c5075fa40ef7ba4f7d964399f82426d6417889b7c84428f1b96ac","sha512":"8bdf52566b8af67e5482d9927f81970943cfe7386c5f27f4108d7d52c356bff8e9c971ce4dd132d8b5ec63c456b3465abf1bae4cb6a236f9a759ab39c94a734b","ssdeep":"384:wVm7PRyzVJe6cgrziQ+rI0TJOMLr1299HlDitlKQ96Wjzr:wVm7AxcgvSrTJhtcMLr","tlshash":"01d2b97071a096fc6ad344e6b43e400cb1386aa4c96d5561f3ba7cb8ca119c97e77f83","size":30176,"data":"","first_seen":"2026-01-31T21:08:57.360627Z","last_seen":"2026-02-19T17:02:28.728752Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fec25bfae45d385fa351dfed85d613ae","sha1":"1948cf25c040432e5d3eaf2caa2101daf182b5ae","sha256":"d267e487102a6c2cbe9fb44cf91fa0e008d7cd182cf666d71d9ab8b14993a559","sha512":"ef9d40c74bb2074d263c98d805e596d293adb613d609bd1ffcf54118ae3f3f604e94d895df7fcb28e959d4f1aa9b49ada30f4f138567bb52656dd1cea0c750e2","ssdeep":"","tlshash":"1131462e7c15df0aec3a7c69003fde7b50cc8abb8254dea981decd150a0a57a27d59c1","size":1720,"data":"","first_seen":"2026-01-31T21:08:57.394345Z","last_seen":"2026-02-02T22:33:10.226452Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/b699731cda0020b4.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40440d0a26afb7694208aaa1124c32ae","sha1":"92e8a42be6d633c2e1600636ad212c413efc6dad","sha256":"5e5beddff18019122661132c259f1c8997d53a8136edaf8eff390948b963c9fb","sha512":"81a7ea351def4c29eebe87171688734b80801a7e40786a86a551687cd6bf81530a7f543c9fbc1fb6f4b42a857fa970238926bbcc24ada2c6b2b2d7389d2b0e08","ssdeep":"192:OqB5qeZR31Jm74v1o0n+K8jvZnSGQpXeXcBorSncmMcRD1o26Ss1RviE8VSTtrSF:Ooq8RhKnjvhm/p467EIa3XDoOar","tlshash":"ba62f7e576d2f071a3ba1ae6d03f0056f2691db4240d1010f369e4f9397489a86e7f7a","size":15305,"data":"","first_seen":"2026-01-11T01:55:53.572093Z","last_seen":"2026-02-19T17:02:28.75444Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/web-vitals.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","size":6599,"data":"","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-05-30T16:55:13.565573Z","times_seen":3485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/a7c7a8fadd85f653.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6736d35e645199d0fbb2c26ff1a4c4f6","sha1":"330babe7ad7a1a008df4fbfcc4aa2022ea5216a0","sha256":"a6c5341275522eea933fa0b30bbd42b98d1d5e1cf7db03c462ec5256d35523b2","sha512":"28bed02c6ff5722134d2315615d52efb1c3a29ffa7bb4da160554f9a7433ffbfb879ce9d3c2da0d6a67a42b3ad8476e0253814cf7aa8dd3197fbf256900127e8","ssdeep":"192:GL4RE0SZ4r+zeLhVbzB44ZdLIx+7TFnRA88KlWOfSeLzt:QOr+E5ZdkxGBnRA8flWOfSeLh","tlshash":"ed42c9546154aeece5bb00d1f82f810d312f3f98c60f8870b9bca8b91a645d43b56fda","size":12584,"data":"","first_seen":"2026-01-31T21:08:57.356712Z","last_seen":"2026-02-19T17:02:28.855421Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/08c39a0012534f66.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff39d75e72b017105228a3e3937e7591","sha1":"f2d18c32727ea5c8c3025c3dd6062cc64a0205bf","sha256":"bde5066619da447ebe65deb46930149c780552d9aeaea4827915013d287be571","sha512":"cc6a711c714a6309780c59e28fe35a28e70d35720b3c4f0eb25986f230329c1a1e047514909fc053fdf56233194352b7595f57e4de1271c715d0fbbc315a5cb4","ssdeep":"1536:0N29IxBQi6ha/rqj4gUnFZSul2PmOot685j:05P6M2jDRuPn6e","tlshash":"73b3f7f935d5f48207ab40a6c03f0006f32c5d37189e68a0a3e5ddda756499de1b3faa","size":111402,"data":"","first_seen":"2026-01-31T21:08:57.335286Z","last_seen":"2026-02-19T17:02:28.643844Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc48946414353a508a2e81688dc2256a","sha1":"60b4b3d7a8361dfcd3cc57643430adbb79222f32","sha256":"2f1d469070d877446b7a3eb789f05b5b88ffdd772027f5a721c060966b8f7467","sha512":"f08381bfd86816af3e061586ad25ae232a4a0054421f7a2a91c453d8130f294786baec00b7b70df1fb95f3a66282a3ba4401a53d878ff382e317abd0d4f09b7b","ssdeep":"","tlshash":"25f0e5e2dc12cc0fc3634e2d283e6c7532cdda7006a9624bbc94c9395dc6e380ad0d92","size":444,"data":"","first_seen":"2026-01-31T21:08:57.395189Z","last_seen":"2026-02-19T17:02:28.888807Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","size":40939,"data":"","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56349caf4abe4f80098d17cc84da57b5","sha1":"9dddd21f9e3d10ed06caa61cb9ca6108d9bc4429","sha256":"9c69e579ce81e354ea505e34972ed2739a74ff432308efb14e30278b969ee927","sha512":"53941b792038f5119af27067887a54f18d665d2d56c5b48105317e70568659cdf02576e310c858f2d35ab530062f25d3551c25d1c5b380d31f4a2ff911241c5c","ssdeep":"","tlshash":"1d31e89fd85af8507c61dede457e6fb685c6c8738434082cab9ee898003143353a88a4","size":1681,"data":"","first_seen":"2026-01-31T21:08:57.396111Z","last_seen":"2026-02-02T22:33:10.228066Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33d6cc887e9271c3b118752c12f9e6fb","sha1":"b423f226fe3be29277db34985efed9ce583c253f","sha256":"7e83c836b79c402ab10dc8b8cfd1468c977841e9f5719bca20a3a42fceb0e3bb","sha512":"1ecb9b95abd5818b773c0e0a57c7688cc75cd8c6d704932f47be44c199d7fff88a18f1069f3b7a524f147843d4ed3f0645b9ee22c483c81e53249c23d3311515","ssdeep":"","tlshash":"d031ac2a5c09ed46e97aad390a7eac350489c9b347505f66c6adce4e298303c5ff4e10","size":1539,"data":"","first_seen":"2026-01-31T21:22:35.263714Z","last_seen":"2026-02-01T20:03:45.270847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/48f61cc265d47694.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dee46bcb482bf82bd4c1029f187c68ee","sha1":"d7cf4d6188a9313e31590dacf5902ec8b1f1b311","sha256":"1943b9c626e8cf07bb3fc5f19f03effe59f3be189438303a477919db148bfc7f","sha512":"ac80a472ed1005853052a9817975646693f125531cb9f9d5ce6d69b490caa8c18bc06077c18d1ef30fd5b71d39b97c7fcec9559537c9f12ecd8c6e972743b9a0","ssdeep":"768:UjLnQztxulYXI6KJxcoQNLE5k96UJGSgf5djPZ+a:aLQYcNLGk96UJGSgf5djPZ3","tlshash":"d9130959b021ecbb223bc1fc906e1416b26d5d79e31a6a24f3ff896c131494531a3fa9","size":44188,"data":"","first_seen":"2026-01-31T21:08:57.327027Z","last_seen":"2026-02-19T17:02:28.753031Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e98d98370b9189e9319516ce9cc2953","sha1":"b62dd5b8392a4fbbd904529896e246f6f64095fe","sha256":"6e246b1adc6b2b9f732ec3a00a54a3c11898989e0d9c18de906831e16f33324c","sha512":"60178882cae6a4b351189baf4a0a7ab4f4711cca3c51016b39225ad74dd49e6c7c8d0188efd7145ea9445f296f1a882cb2a075788ffc292b88eeabe527ba6679","ssdeep":"","tlshash":"e131c69fd85af8506c61dede497f6fb685c6d8378434182caaaee89c003153353a89a4","size":1680,"data":"","first_seen":"2026-01-31T21:08:57.397856Z","last_seen":"2026-02-02T22:33:10.235148Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86a74f5f184204cb09ba94eb7c44ebe0","sha1":"82cbfc5730126f67a68bf55978565a8319a21e39","sha256":"9a16760c4a59f3b0e1befa7835483a7c388d3c0e2095fbb47e55ff8bde32ce2c","sha512":"77c0ddb1beb1be7516ad2eefa7a15bdd168a99ef9ffd957ab4dd8c5408a661bb43ae467a03e3c747d84f4cb50cc5eb3e2bb719a905fa552800b51da8205c19e1","ssdeep":"","tlshash":"fb31e69fd85af8606c20dede457f6fb685c6c8338434182caaaee898003153353a89a4","size":1681,"data":"","first_seen":"2026-01-31T21:08:57.398654Z","last_seen":"2026-02-02T22:33:10.235751Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fbcf6a3d4fa540a1cfffe923b3d5023","sha1":"4e793f3827a01e9c4e3d4550eecfe42ccc2cc00e","sha256":"612c89ad7a94b48c64eb1de27b51b969a3de814ab4d5ca2f17f4ab7e74c4982f","sha512":"a5d055d4a24fd88875fd4057d1e8002793101d1c95f9c846bf92e6cb4e205b42d0e620d2496dd730874eec5b2b6a694e377b9f723393c8464fbb8b95bff0cbe3","ssdeep":"","tlshash":"1d31f99fd85af8506c21dedf457f6fb685c5d8338434182cab9ee89c043143353a99a4","size":1685,"data":"","first_seen":"2026-01-31T21:08:57.39951Z","last_seen":"2026-02-02T22:33:10.236333Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e2016cad477c6d44523ff529dbecc23","sha1":"6f96871336ef4f329929cebf82088de58f11e30d","sha256":"f52bac6565e51b0233babc08265efc2a896a1dc65a0a3373990de093f13f5465","sha512":"9e773dce7f8fe5f1c7b6e9f77f46c759f021e99bbe5d5860f48e9e9ceb7ceb762c70f48ab26f2a47b8cf34760c8fce89ca119a6a11400a34ac7b0754d67f879f","ssdeep":"","tlshash":"f331e89fd85af8507c30dede457f6fb685c5d8338434182cab9ee898003143353a89e4","size":1683,"data":"","first_seen":"2026-01-31T21:08:57.400264Z","last_seen":"2026-02-02T22:33:10.237544Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/eb768583117478cb.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2f085e4fbbf416372c204f062fda78","sha1":"e25ffad06ca3245489a474478f05d78d69203b5a","sha256":"95ac79e9e04a35bdc74d23248267dc235930c14e20b59c6536065072ce08696c","sha512":"1d6369070024d1452fbf563facc2e95332b477bb830bb3c1786e92137ce15d17dd0c81729eb5ea3eedb94d8195ad0de39f05b835b1a0f702f838f586a0dbddc5","ssdeep":"96:RgjKIjI4v5ksYquBKZ/L5QXqInDfwxbz4o:a+RRBs8Dfwxr","tlshash":"cea1ecb9031ca6ec7887446c23229423636fa1bf75de53b04d6fc9b458d74c8e7634aa","size":4932,"data":"","first_seen":"2026-01-31T21:08:57.370006Z","last_seen":"2026-02-19T17:02:28.648678Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"108c042e2324a4e0a86e104733d30cfd","sha1":"6d78608ac581362f86716c76d9b5cc7ac7ac49e7","sha256":"d82c42be4ed87f241417e58e7d2f3cc92022533b6cb9b0f64dd9a81ab5858c00","sha512":"59e59dbccc1b9d96d41c605fe4283d8c3ec1ff73b35c9e072b73db86abf16e7cfc392a8f57b8963ff2aea16109cc0ae0709a8e051b551a03954758ead7faa0f1","ssdeep":"96:LA9bFJZSXV+lL82QbHjfBGN+XVXOEXV+xV+6XV+4VX8SeV+OtVX69V+KJV+DV+8r:A82QbHjfBGN+memCj","tlshash":"5eb14778b41acd58ed8e3c15353f5c3a658d939b869ade62c2e8dd20828743dbf527c0","size":5423,"data":"","first_seen":"2026-02-01T20:03:45.277491Z","last_seen":"2026-02-01T20:03:45.277491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b61715daa18109f925f4c794dd5e89f9","sha1":"13e641015e7f8dbc27793d3e331152806b0a4254","sha256":"d7392a404e0feec03f0153e4d8f907c6ecaa646e14b05814d339267f76f239e3","sha512":"5f802eb5c7cd88abe0d9834e7d9b48eefdd205fee0f1986616221c6b5f59ebe1a5082a1537cfdbb2c86173ea1bc83feb32bc50304b28c47af7f012f50bd4594d","ssdeep":"96:LK9rtxsnJXHJXHiq7ZxSXV+lCZ0XMXHJCXzXH1fsXbXHD6XrXHpSMXCXHyN1XZXa:IxMGmi","tlshash":"16a158247416ce5ced9a3d66343f5c3d254d925bda8acf26c2e4d96083c7439af927c0","size":5052,"data":"","first_seen":"2026-02-01T20:03:45.279533Z","last_seen":"2026-02-01T20:03:45.279533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a659a4b0e579811bc5023929ba4844ab","sha1":"d22f81bf0900edcbd60abf802263d8ec80c8f5ca","sha256":"912749bf60af5412f1089a97b3ab5bd639378d17917765c0b01537e8cc49a753","sha512":"4916005e5e2a0b57b360240aecdc5909c87c486e19a985f79ba95011c4cfb1bea15601a4944e22754114b24ba7cfbaec9867fdf3126f28dbf91aba0abdba790e","ssdeep":"","tlshash":"044154e1b671563b23b8059cf2359712b7a7883b810e05b0f15e882d19ec8d9929fb86","size":2350,"data":"","first_seen":"2025-11-23T22:59:50.452286Z","last_seen":"2026-05-03T15:31:16.590641Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/7844c00c7b87d4b8.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f596bd85087ae8c7da24ce1771082c9e","sha1":"b7529d11179acbc5a77d79cf2cb3196e1dcc643c","sha256":"b8089e9f96c5d58bc21c3403009eb46a6d86ae550566419879b9615a439ba651","sha512":"fc9bf925cc24f25650d96a00d8acad75c7f110c1459c93473aa4e885f2347766465cdaf397133edf42f4c0fdbe22c42d36d0e352327382fa5a0be1efa1ad08b4","ssdeep":"384:Sjl699ZRlP6Xe9XEbp1k2PF/TG+IDCOa7f3flVC:Sjg99ZTP6Xm0bpfNbLI+Oy4","tlshash":"5a7229e02109793d909f118eb22a651d772d3a46e00f1838b27ddcfc12aded43197bea","size":17521,"data":"","first_seen":"2026-01-31T21:08:57.369086Z","last_seen":"2026-02-19T17:02:28.737399Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"919f3728094c0008dca7c7c773c602cb","sha1":"08eafab55768854402b27a61b6c377b059530ab7","sha256":"6225dcee2bf80b5550534e7a58b08f762e3b9c02fd91b6315dfd0d0dbab7979b","sha512":"b5da9f94ac439ffb23ed2d9f3cfd9d7b3169ddd0490fbdf7dd8793b61cfad016ab4280bc3de083a72764170cc6782e21c297731fdd7035ef087e0a09fe0d2bee","ssdeep":"","tlshash":"6231ee24b815ce59dd9a3c36393f1c792a4d806ad74ade1a93e8da6583c347d6f23380","size":1854,"data":"","first_seen":"2026-02-01T20:03:45.281519Z","last_seen":"2026-02-01T20:03:45.281519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d67c9b2abb6b10d7ecfbaafdb5b9181a","sha1":"52fa0f7adc8b2d352b66abc1bec5baf4683d3f68","sha256":"27916dc2eefad962207291d32a8884d3418074afe51b41a5438d9012c7f0461c","sha512":"eb89060d7cdcaa6c876c85be38f2306f3b6b0f1621bf98fc61617a7e936dae32ff073c7ebb48ba3ca900673354d050f36f6adb1bf3e1bcd379409ccdf4a7fc81","ssdeep":"","tlshash":"7b713c687059cd59eccb3c61253fac39264d47aac55adeb3c2e5d960828b47cbf427c0","size":3505,"data":"","first_seen":"2026-01-31T21:08:57.403486Z","last_seen":"2026-02-19T17:02:28.902517Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c27f942349f4062694a39f2ca3ce5317","sha1":"66062a3f43737a25fed31db9b33fe41c9dca2836","sha256":"23d51377bb3b2bc289d3144cb79bcfddd97e7d18f066d99e88c7fd9b1ad61a49","sha512":"6714c20d82404c3c5fc77bf68e551cca73a51b7006301097877dda3182af4495d848b92321b43b8e86461ca1add3425907b0347506733f7c2b1e3a3107ebb75b","ssdeep":"","tlshash":"0e800474c1c00c17c173003f54341001017c4004444014001354515c1013355551fd45","size":34,"data":"","first_seen":"2026-01-31T21:08:57.405082Z","last_seen":"2026-02-19T17:02:28.90331Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","size":4385,"data":"","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/e3d00364d13321ed.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2486934aebd0b00e55e68b6dfbe9d0fe","sha1":"848dbefe394be98e044928f1374fb59929c92f93","sha256":"11380db3ba8aec5597b4cde9773951510aa89424968a8c7435db112f37901b0d","sha512":"807a83e35db9c4bc646787d3a154bf2e80e386daafb9fd97ea6059fbde48bbc924847a8108bf120b524c4edccc89acd8e5139ae522a1a2655a29dc720a4df54c","ssdeep":"192:uF1HgFrAHRNiN/Rv3cGggerToWWeoedmPWo21UCS+94eNSIOEPZJJb1I+7mTH47C:YHgcRNiN/ojfoWpHmt21u+9vdmTHS5W","tlshash":"1382b6ea7282f0b197bb10a2c07f400bf2793565245d4054e7a6c8ef74f056e86a7f7a","size":18259,"data":"","first_seen":"2026-01-11T01:55:53.455045Z","last_seen":"2026-02-19T17:02:28.7957Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac0dd6aee1f82652ddb3d2f6f22fd526","sha1":"b3d90e3dcb9b8476b9ceb0b1d7c636e5cebc88a2","sha256":"cf3febcdeae6ecd677d81e0cc3689589a76b30be5f334ce8d1350eba213dc3e6","sha512":"b5cb2699e8855db9f35c8fb1ed90afad099efb840c467e56d2c73a8f7eb920bcb6ceee6553595b86d453d3cfb2620e902ead1d7f2c19b80a7c4c4dd9210d7e9b","ssdeep":"","tlshash":"1f21e07162ff53b4541873f4c9278aa2bbdd2c787b49e788ca06cd1192d236ccc99897","size":1411,"data":"","first_seen":"2026-01-31T21:08:57.40602Z","last_seen":"2026-02-19T17:02:28.904038Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/8d97a31a2b7bb52b.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a6782562784798052f56f3f546edd76","sha1":"5ca984010f470a582d3d61937aa02edd1f2895cc","sha256":"eff3ee36a789baceced46592cfdf60b6b5c83bf5d7031b9e7789b45ba2e99314","sha512":"cd75a77848a365e4580e7897c2c9f6ce89280556a892969406e4219da7dac8e1d56ddb9578ed3b04593af3ba8a141294203fcc2a3366261d661ede7ac6ee41f8","ssdeep":"768:0VfQIsNtn3lErrOfQHL099txV8zlutf8uTpfQlTWH228qz9x/:kQXxSrS9LV8s8u9QIl","tlshash":"6e237484b7a5b02947a25191045b544bf278f938a4cc18acf360e4f628baddad4fff74","size":49842,"data":"","first_seen":"2026-01-11T01:55:53.523305Z","last_seen":"2026-02-19T17:02:28.656397Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"056fb3c868a551d7e6a64cf41ae20613","sha1":"3888cc639eba121e1623d9b6f07b38302dea3787","sha256":"1bef12ad84df3ffc564241391a9a54db7333e3b975c08b0dfb015d5c240475a1","sha512":"adc0d6f75ec696cf7f55f5c1d3f4bdf300aebbb762e7fec00f0e6e39e6b1c01a63b5f29b35166e857137e19390dfe30ff0102d7aeb120b2881578c8253cccd69","ssdeep":"","tlshash":"6f2142e556f435e0e601a3e0cc2090a87b5a20be2b27c6dcabd82cd0e75015d436cc93","size":1295,"data":"","first_seen":"2026-01-31T21:08:57.407054Z","last_seen":"2026-02-19T17:02:28.904795Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b1733606ed50cb80567c42e216893b9","sha1":"93ea4bf54b0c2d1cb3ca496f1e8169ff9364f87b","sha256":"d2c71fcb844e9f3e7ec24d4b6f2a146b3737123f360bee64dbe359dff342a0c6","sha512":"0ff87f1b44edba6f2d20e2a8b64d521266dbbc7164095d6f4c00ee2b099b89098ea969346e1f92180d730fb41677a58d61e604ba88cc3f3526f0de4d728b16b4","ssdeep":"","tlshash":"004122797085ca6dfdd63d06343eac3a408d81d6868bcf19d6d9d92140854bd7ba2ac4","size":2123,"data":"","first_seen":"2026-02-01T20:03:45.28868Z","last_seen":"2026-02-01T20:03:45.28868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/8a9983e0eefa6ffd.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2778cdf6269909553d3706405b77a3","sha1":"aa1028f797111fbd2ac1fe8befbc5fc3ced497dd","sha256":"e05ee3375ac81e36ce934885bd42fd26f7873892d52da992947b6ca7ca198772","sha512":"8343355873776a7f3aa490a93a9d79e43be7527396f977f53e07ec8552e29b4fefd257638ee0c3e1e4ca1f9df0080d4bae32bf866763876a99daa0d247e9804b","ssdeep":"384:fBNKeDneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5y:5Nurxh54fVCb++n2babYVoNqfP0","tlshash":"04d23f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d47a67bce","size":29243,"data":"","first_seen":"2026-01-31T21:08:57.384918Z","last_seen":"2026-02-19T17:02:28.621203Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8d2b097db076b4bb35b63e6284069b7","sha1":"eec10d158d56d43da5418a0f6f29c2b86e1fe232","sha256":"f49e0e1a0bbf125e7120c78e29915277af09c23551ef30ed27594362f1a651b0","sha512":"0477277c2cd43dbd90644f17367e76283720fbd85bc1747cd26a899086412568c5c10ab511a884793aeb53527b60fec90b7c2faddfa41dce37e542454a17b308","ssdeep":"","tlshash":"6a014139a124c961ce9b112b793f4cad678c94894718cc04525dd66973d247d5f3b480","size":803,"data":"","first_seen":"2026-02-01T20:03:45.290777Z","last_seen":"2026-02-01T20:03:45.290777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/fcdabb53594fa7cf.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc35eefdfb561070a6c3fd395b8b0e06","sha1":"0e99f80f3609455f7a1d0de1e932575bc2931551","sha256":"6df913cdbb4364f61f7eb112cf23d1b40438d47fe337266bbc9c0acefa387e26","sha512":"52c394db82cb28e8d4376c834989de504542e9d324d5df43688f5c03344a4388ec7328597a3396e7cdeeaf4e9384047a52d812771be24361972c3dac98d90cbf","ssdeep":"3072:3LSLiYawBqU4ebR8+K2k5tx9FpWgJlg4P:bSKU4ebR8p5txxdJlgW","tlshash":"18f33aaa33a725334be9829ea4b51200f3365658604e043cfb7c9dd7296888b71f7f75","size":159127,"data":"","first_seen":"2025-12-31T07:43:06.450662Z","last_seen":"2026-04-28T01:10:54.191549Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f116a6e17b5499916aa4cf9c14e37464","sha1":"29226226a8b7d7e33f7f62fc4b0bb916e1bea585","sha256":"eddf47d0daa5a948c6e1de4e311178d2ae6cceb51723228f9f289f558a2f24c4","sha512":"158dbdbd41fff026dc343ecf68cb8b3ba24d458e69d52b195dae9168188e205e53af0dc2a77664c83573462993176a25990164b366537978bf5487660a48ac1d","ssdeep":"96:LvTkUIBhk3/TtVdzgmQ1PfNjliKSForEUTw+S59qR+f:7nA6Pdg7Nfll7fEUTwVgy","tlshash":"bc816f806b7bcab8f515bdae0b337c343c0128d32a12d195c7a5ac09d99443d5ea9ceb","size":4181,"data":"","first_seen":"2026-01-31T21:08:57.410236Z","last_seen":"2026-02-19T17:02:28.908805Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/be7248fa84c6d551.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"598a7c75a166616da34d0720a50b9cf3","sha1":"35eccbe396ae1d530fb0174811f94c4a35dd1c10","sha256":"99be381c3d3f98808a540d62ec9cb7fe1797ff9e3588e5078a26d52374152fa7","sha512":"5ee7366a017183c0a2049c1735a9135a139e62ed6411726d18b9edce9ce57e7d27bf5fe1b8ce6f915773d1d20e0c0a9cfa9ee383dda62d3a65043daafe744328","ssdeep":"","tlshash":"5651a5413444b164353629a8a0bf000e766e1b75834cbe3296fd74fd262189cdb676ef","size":2515,"data":"","first_seen":"2026-01-31T21:08:57.246674Z","last_seen":"2026-04-28T01:10:54.169753Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/27b71be17762de0f.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"069193656f475ce4aee7e5e8e6d1079f","sha1":"d5cf6ae018c2fa7ecde21cab9b64d805cfa05763","sha256":"925c38b78da8bb575646dcb623a2dad342194cba6a837fa59248f726dacfc94e","sha512":"2e1974b798cff74ab1f73e0d94081deee5aba0c0ee662e19eaa19a483b47c63b0138f19c6151374575656aeaef474d549a82e520a56be415656995389c167c35","ssdeep":"","tlshash":"7d111f667191fab240ae40c44c3b4147f1ad0cb239ad70a08398e4ebb554b4c8471e28","size":1000,"data":"","first_seen":"2026-01-11T02:03:05.533679Z","last_seen":"2026-02-13T20:55:00.865163Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/19b0da46175198e4.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2007ebf0b401ba67c261030cfee8e756","sha1":"e38591bbe7d137269496a20c91da35ea00581c71","sha256":"e49adb5040e39e1241fb0ec7756630b4a0bbca6dc3cb4a82abb2c15772c1b528","sha512":"7768dae710c0e0a546c9502c8b1f5e49cde8ecd56541cf9dc726ffb8f694d4f5ed2ef5e5a27e26da06936686bb3f571f39fd2c81d85589f00808cf11c3353109","ssdeep":"384:lDxQbCQlLQVt1VmIudAorv8ii9gGTHR42VqzR6l+mgebWgrw1gC:lDxQbCQlYHmIuq9zrRUElHbWgrugC","tlshash":"a5d2d690d121b8b8ac6b89eef57d801d721d1b24c71d0b25b1bb6efc13446c87e53b9a","size":30131,"data":"","first_seen":"2026-01-31T21:08:57.374651Z","last_seen":"2026-02-02T22:33:10.172899Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0e3483dbc707afc9343e409b2ef302f","sha1":"93a083c54d32eff9ab330d1467e310821446792e","sha256":"d075d9a8eab512645a484b04ddd2880f2662da6b4f291d416dd7a74437d2425d","sha512":"725d3686b97380c5edee24a9bec48c2d9264310342ecb8f2b79d49ee8ee61738aa5cc50a17f2f22ea0ae8537e451f1c2ce30a15f9798d3932e87b609d3bc6b32","ssdeep":"","tlshash":"d6619548b35dd6e4fc45bf9e02337c743c9128e721079999cb859e28e04403cdad5cea","size":3437,"data":"","first_seen":"2026-01-31T21:08:57.41151Z","last_seen":"2026-02-19T17:02:28.90956Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1028b0ae55fe86fa0135133a581f59a2","sha1":"9e391fb7cb34a6c09df81c765c9aadcdf2c8cc55","sha256":"1bb94cb864247f1b5105fdc6448b85b7b0b6415b0f1142b5d7dee84e8b30c2a0","sha512":"b774af72139ffc8e74f5d682b5cc48e68a5499a413dbd7e9e233c0c332f7807671e0997ae3475b8503f1e651c1b5a342c9a52643950780440be57185d3a10d82","ssdeep":"","tlshash":"6341ffe4a3d192b3234d7afd93626837f903e8a27916e0d981801d79581549ca9f4cbf","size":2042,"data":"","first_seen":"2026-01-31T21:08:57.412207Z","last_seen":"2026-02-19T17:02:28.910272Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18c8e920a48d5bb95921e6187c07df2a","sha1":"fb3dd7bab6f2653b6f4a734c0624ef46ca779d78","sha256":"20333bfd82aee4085ca68fc8768b0b251267ca5b5c93d3fd464c690eeef54b0d","sha512":"0a10abcba25f402288531176bc4ca609daf16ad26b3d678b1de79e37dc449b3a647d29b4efc90e63d2153d273fc1d0cebeae2adc797fdd432ca5751f96cf9601","ssdeep":"","tlshash":"1d11ab1cf9a004ba00e6715c5fdbe1836fbb858792444c2cf5c40550f70ea2b9543fc0","size":860,"data":"","first_seen":"2026-01-31T21:08:57.376306Z","last_seen":"2026-02-02T22:33:10.199626Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4b73fe5a475716f9.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cc668322619931c6ba9e7055242b5a0","sha1":"4bb7562039490799bad7c2e1b670f6c40d951c26","sha256":"fd8fb3c6526987e002929cd9bb872f3527379dba60dc0aa9a6c8497c1b7becc6","sha512":"16adf74936daa584f2033f586f66240b42ad07ae36def698ca2fa1e0c88f5e350bf13a34833aad7bb173dcf789a443bc54dd077735919ea87b8b1e2fa650fd23","ssdeep":"","tlshash":"b211688e4811b7d4e74ad1ccc127c62574642b30280e693af5bb6d6f3130749fbe151a","size":1000,"data":"","first_seen":"2026-02-01T20:03:45.298067Z","last_seen":"2026-02-01T20:03:45.298067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dff027882da0341495ba68ca5b56b9a","sha1":"4f4d37397b761b3e98faefb77a8b942ebf95baad","sha256":"a594cc7275283b67b7400bc9cf684cb7ba5367425208953c24221ebdafd9b6a8","sha512":"d84cd09696bfa64b64f2fd4e785d1a2ba030183f92cccf9024c5d22ca00d5996d25e9f98f756e55a00409ae7c7b576016398a57c3d1199b17b697d22f326070c","ssdeep":"","tlshash":"c98000b0c0800c3ac0ba00233cb8300222ac808a80020080e3a8a08c22322ca8a8afce","size":34,"data":"","first_seen":"2026-01-31T21:08:57.412868Z","last_seen":"2026-02-19T17:02:28.910984Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9051b8fbc6d56b1cc51ca5858a4b82a","sha1":"afea37999959d990d87a327c8e39eaf603f9f0f2","sha256":"c6aa20662b3e22992c12f4e69cd335bb7e6ba28893d596d8674e8c76016d3059","sha512":"2e4dd93fbfa65ae811516da2deae1871fc1495ccc63543a738cf67472ea4f3f1e0aaccc00cf3092f38388b7555be212fef4a55da7ee1ac7d457eec4c9080e314","ssdeep":"","tlshash":"b63145e45161cb7cf946be6c99232d11cd019deb7d91d4d641915812d0690e0cb59cff","size":1828,"data":"","first_seen":"2026-01-31T21:08:57.414289Z","last_seen":"2026-02-13T04:13:07.757219Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4904d04204e17635b3b5578b35c9ca30","sha1":"c0b6c903fe8c2f835b770549feff5d28a249b4aa","sha256":"9f44e491c01757f421aa47b533342eef1f9f459854a2161b91243b3e955f1693","sha512":"fdf27fab923ac1b2c44209b0f701f1db57d081814f59da811374467562ca84074a1d6fc171bda214378f2aa1dbdf1587df59a09e0bfa32cb49d6bc6b680bda38","ssdeep":"","tlshash":"77117275b01ac959fe993c06383e6d3b6049839a8696cf65cad4d861414507dfb42ac0","size":1072,"data":"","first_seen":"2026-01-31T21:08:57.414993Z","last_seen":"2026-02-13T04:13:07.759685Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/d46c8391d5bdfe55.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a49eeeb80b04d3eb65b2dfd63e0319d2","sha1":"fea0deb183d96607efa46c66bc698a87dae47596","sha256":"d61d63e7f327587ca18a3a975a7e653ae0ab15fa33540e484e5e55bd84521ee5","sha512":"c0957f45d7d25dce06451b30ecbf591d9f544bb4ed72ca6ed8c26392d69fc9574d0a874d241b135b16cdc5b13c50a3ca34426bb67ba663a928bca126d0e31d17","ssdeep":"","tlshash":"4e113533b340a1689ccc43e48d2901759a8938fc71ca10f5fab68ce27971548f25de7e","size":1000,"data":"","first_seen":"2026-01-11T01:55:53.599468Z","last_seen":"2026-02-01T22:45:30.643059Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/5664bd740cac6a96.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"838e5b67c708c3caa4ccae2ab6eccfcd","sha1":"b2666226e6fb839315d216fb69074265386b6b8a","sha256":"3afd0a23cf42518fdca2dfc42bffe1b2c611189b89799ecbae2386434adc8e3f","sha512":"845acf9755edd329f45184ad9bccde9249a2018ea514934ae462a84992c69b4db39d636b842de7d5c71b9187c3e2fedab2b41095dadbbfeb40a683b3f9d8c76a","ssdeep":"96:p7ctuv2BtSDxfARZ0kqJFv2H43uuqoE91YTkqdYqiEAXjv2YM:oBtDRCkqJFezuwgYjlXK/","tlshash":"d0a1b6b231a0f490d16b4294c03b441eb27a2d3e609d71b493bd8cfd67e544de6a2f97","size":4813,"data":"","first_seen":"2026-01-31T21:08:57.248038Z","last_seen":"2026-04-28T01:10:54.184543Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/turbopack-6ee26e047f7ee00d.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b5b2e80a23c95aa5190c9fa05e7355","sha1":"876299aaa2a3feb741115dd1962580e7c343e905","sha256":"749012b61c5905067dbcdcfd75aaff565a61888df8f23319a9c2a249383b5aa9","sha512":"bdab1b321b5b551c66f7bc68b1264b62dcdf4ec75f066934487edc32c99aaa66ff2941603a2515a089f8c60becdf493ac753db8d7e46a500e063f6454169f2e7","ssdeep":"192:lspVl08YEsUnUj5E4dn2Npl/daXMh6lW9xocxkUk1MsI:lspVv40bl/A1UroQl","tlshash":"3b22c6da33b6f073436fa5e6807f0040f17944b9145d542893aca8fa38794ae46e7f67","size":10680,"data":"","first_seen":"2026-02-01T20:03:45.099931Z","last_seen":"2026-02-07T15:13:58.763248Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d20642de5598670fa53acc2944bedd41","sha1":"607780618fe3f368ee947c55c7d3f27f6f8499cc","sha256":"b23a3fb96d58ac053ddadd6e53df1eab5ab0c0c083e7564fb76f4e703a065db7","sha512":"2d56e7c551bcfcf59e5deca97201e2a61033d0df70cab1b96579e045b9dabe39e34f9bc4c9055d95365702fd8f1d784e3e1f13bbecc078497b7df414ca34bb81","ssdeep":"","tlshash":"1a800470c0410c15cc35001fd4341101017c400c40001441535050c470751075f05d4d","size":34,"data":"","first_seen":"2026-01-31T21:08:57.415703Z","last_seen":"2026-02-13T04:13:07.760311Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4c6af75a4d489639.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1ffd2810057714d095867acc45f47ef","sha1":"6eceedd6553cf3063278c27de1aee25bb0667c36","sha256":"9604e0e5b4711c50c013e5c92da26573dfb72ae0ec3b83cb53ed75ea761a2d4c","sha512":"d913954244730850117b7c5363093e05714597040db3655885e941baf6cf66fde9ff661a6b0d1d0c9f8397e67197b0c0b7a725e1f85142d9d8e1ece11a25efcf","ssdeep":"","tlshash":"6a6101b6239433bab4c00fa442e6702611f53a6b30cf5174dbab4588fc55ceb907a55b","size":3450,"data":"","first_seen":"2026-01-11T01:55:53.535061Z","last_seen":"2026-02-02T22:33:10.184641Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc5fe6c5692f7c6888c23eb005d33bd6","sha1":"41751e1b3e744af66fff031760e14f39ab8e7e11","sha256":"c2fc027d772d7ec9cf978a65b519dfe1713fea1274c77e3803d45c6986b5ae4d","sha512":"5cb8da8eaca5c7c45243b34ea40b1bdfb0e44e2f7f2acdc1d07b6ebfd0663a576db364afbd777e7f8ec9709a33f841af426821afd9d870a44baebe54b64db262","ssdeep":"","tlshash":"8d31d09523ed92f9f048b4fe291594502c9321df7de2a178db613d20ba911484ea1fef","size":1710,"data":"","first_seen":"2026-01-31T21:15:15.04624Z","last_seen":"2026-02-13T04:13:07.760879Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c67b78482e2ea3d05b16b8900491c7b","sha1":"0baac54493aae6f7443b7012cc9e219e2ead8e66","sha256":"2029b1ef0a1d17b6c66fa84330d55c085d32b3f1b5314178251f97cbcc22e2b0","sha512":"ad4d5ef97e94962e57c22494f10bfa90120a0333b9656c72df490ca43dee7b2f19d007c1f0a84de0f3fa1c0f1ef6f0934be0feb7046330cb4c1dacf8586d4849","ssdeep":"","tlshash":"bf219ad53159d468f808b6ef07337c62e82a5ad555f280a8d3938948b4c68b41e14da7","size":1213,"data":"","first_seen":"2026-01-31T21:15:15.047034Z","last_seen":"2026-02-13T04:13:07.761422Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e94ee81f01b6c46a34d25cb1267b531","sha1":"316f65f45b52c49e2826a59b6d9e7cf098b3f163","sha256":"32b6856174f405088385c8c6681f87e5a23d98cc00b168bec5f7e65553f2967e","sha512":"3413b9f5962b070ad7ea7f8d7dbbd28e47e7d00c706a88778bfc71b2e67f4ec410518fd4177277c68ff80807180b2e2dd619ea18c6d43f8718b0830e5a8eb0df","ssdeep":"","tlshash":"8c21110471365659f95ccdeea2435835bca28f4578398f28d2f2192dc8b89ec0d794ef","size":1416,"data":"","first_seen":"2026-01-31T21:15:15.047952Z","last_seen":"2026-02-13T04:13:07.762022Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-06-08T13:21:47.398201Z","times_seen":20940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47fc33a115bcbb7a73308b5841dab94c","sha1":"9131ee30ce6eabcfb4c5538393de2e805969b0ec","sha256":"070a80f96f4e8531b9291857d19b97c2fe9bb8efc157863a45a702b308657561","sha512":"a9aea81b3c9906291620dd40fbcba69d34381e50efa5a2586068edf8aabdee4f1898db68566ffe26b69e7ce8e1cbe19446cdd81fd5c95d3354e5563b5b13281d","ssdeep":"","tlshash":"66b01275f089dc26cc75342b01b62e3105bd00c7000184005f94d91490d217d6702d04","size":102,"data":"","first_seen":"2026-01-31T21:17:18.014273Z","last_seen":"2026-02-02T21:49:52.989006Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c236e034006be48f651e4c6107d6c686","sha1":"20e4747bfea14c1312892176aded7f55c54670a0","sha256":"4de59df36b741479a9e648ac3385e37a5f2b4768ba5f46a4a1d24b9eb32a2705","sha512":"72731abea833d808e6ba0ba0c6687170df85c183efcae6f069a4855947ace432c0d8d1cee528187ed76422ed705069e3dee8d6760df6df7b7d8d5882fd50ff0a","ssdeep":"","tlshash":"6e31d2da6649b1c07445d3fc041358b4ba8b387b2f134aed86409598af54e98ceedce9","size":1451,"data":"","first_seen":"2026-01-31T21:17:18.015001Z","last_seen":"2026-02-02T21:49:52.989871Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1eb7fa09104259b8c4160c7aa5426d3","sha1":"129daa1018dd0207d9839d74a255c69db499adb9","sha256":"c0fd47073ba433a65ddb3a086f02d928ec7e6cc913295ec120fecb0f9266b243","sha512":"65715b1065c0a2a4f2f5bdf16356746803c2089dd6089663bddfecebb08c55f8309f478676d2e2232a4c7e054f85ac357cf998f7045b4ddd0ff6068b8cb0403a","ssdeep":"","tlshash":"22b01270e049cc36dc35381b45742d2101fe40c6020144905fd0d564e0e207e6603c04","size":102,"data":"","first_seen":"2026-01-31T21:17:18.01576Z","last_seen":"2026-02-02T21:49:52.990754Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e75b8340fa5dbcdbaa98f4a9ff444843","sha1":"d343dfad942f061f0541260081f37825f145dad6","sha256":"96793ac56e4cf2bef3d2345d9a0e93a44160dd6a8babbcb28d1730d8835317cd","sha512":"73eef66a783f0853e28dd9d4617e0f5a387f02fc602b73917f24f3f5d1ea05e22ce2eb2ad44c9720132c4377699a520d3135391395f67da3137297f5cf2abebd","ssdeep":"","tlshash":"3b31cfe12b3d60f2f22bb8de84572539dc0271db3e03888bc3b21d593159d5989594f6","size":1552,"data":"","first_seen":"2026-01-31T21:17:18.016952Z","last_seen":"2026-02-02T21:49:52.991677Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/bc00dbd968053a62.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54063eb7b6a4e8845b7b5621d59393f2","sha1":"1dd66c0341da2e2046839b93e596e940817f6422","sha256":"c1bf519ba156ca7fb4bfed64075ee0b668cc32cce0f8a00f4ce720371dee3bc7","sha512":"07eb929ac5488c8b066a963b55d92a1d4146f1f6ebfc87e977e602a7faa1c8943511f3c785b04d6e0aad2e89d14d567e6d641a9cd476de66590be4d7d2248a49","ssdeep":"768:e6OHRgDFZ92YskdtAO/rx4soJY0W07sXlAa7Kht+DLN1AbgnnqD+hH:HOHRgDFZc4tAsv0h62gL39nqa1","tlshash":"bc632ae63351b462d3db5196c4ae8501a27a59e4240c083c75fdddeb3822c8962fbf7e","size":67579,"data":"","first_seen":"2026-01-11T01:55:53.442527Z","last_seen":"2026-02-19T17:02:28.647339Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/3d29fa3d9e6cec4e.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"103bce398bf72f998ccceacc2ffe6e80","sha1":"db2b28d3061395776a370a3539b6ae3bf15d9dce","sha256":"29b058437c3f7686ecf84d33045a537cd24e4f01807e2af5cec8649b51b1dc18","sha512":"10f6ace8ef1373d40e4d4376c214dfaa5e4a45a1dd6a6a0106a59756da63c78791241555c08f24471707cff6fe63ed751d2acc6a6dd00b6ca7538073507e54f1","ssdeep":"96:v0dZm2etxGIWIA1srSVMS7frIDtjyMB0whWDxcxv:R2efGII6sr8j7focv","tlshash":"97d1734891969bdcf5b704a8e92e816cb06d5fa5cb5d0978f9bd38351e000d07e69bcc","size":6370,"data":"","first_seen":"2026-01-31T21:08:57.217994Z","last_seen":"2026-02-19T17:02:28.862354Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"63610-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3YlgUJXNW0y4yBTu%2FJQzIdAE7Vi8xcYUMDjyt4fKK%2FU2%2BzdSGktOnGNXl8ksaAz%2FFRhFfRJYmKkLF56MRj7xP65N7uVkK4E\"}]}\r\ncf-ray: 9c740ce34d2f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-06-06T12:06:51.421931Z","times_seen":438,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/7844c00c7b87d4b8.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/7844c00c7b87d4b8.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"4471-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCRq63oOdnEuTX8VpcQbPlfCIOzf2EREnBUub5okix6gUagm8F7LCjmWoXi3leNyQYfzlOSDFS6aw%2B0mgiRZ6ZWzrStJHG6C\"}]}\r\ncf-ray: 9c740ce35d440b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17521,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17164)","md5":"f596bd85087ae8c7da24ce1771082c9e","sha1":"b7529d11179acbc5a77d79cf2cb3196e1dcc643c","sha256":"b8089e9f96c5d58bc21c3403009eb46a6d86ae550566419879b9615a439ba651","sha512":"fc9bf925cc24f25650d96a00d8acad75c7f110c1459c93473aa4e885f2347766465cdaf397133edf42f4c0fdbe22c42d36d0e352327382fa5a0be1efa1ad08b4","ssdeep":"384:Sjl699ZRlP6Xe9XEbp1k2PF/TG+IDCOa7f3flVC:Sjg99ZTP6Xm0bpfNbLI+Oy4","tlshash":"5a7229e02109793d909f118eb22a651d772d3a46e00f1838b27ddcfc12aded43197bea","first_seen":"2026-01-31T21:08:57.369086Z","last_seen":"2026-02-19T17:02:28.737399Z","times_seen":71,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/e149492fd2b771c9.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/e149492fd2b771c9.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1f57-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2e5ga1OMAYR5SV3AtINt3jTwTI02dk6pRocIC4YuhOMFBgBbCnle2ZXNOJnRfMyI4ZcjGnzRa2EtWWRxRQTac4faP%2Fz0HjM2\"}]}\r\ncf-ray: 9c740ce36d550b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8023,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7666)","md5":"5a12d44809162192ba73b80f8c5d0fd3","sha1":"e293050209f77b727fffe4ee9d1e7371ae845b70","sha256":"ef08e4d8e1f121873218f8b632fdb4314da0c291d34f5d2772c01dec8a24bd09","sha512":"3bb9845b4093a49bc074853bdea0a895746e2451f8d236f40f0c96c103fdfd929e79525719bcea7bb997c7fd3ffbf1c3a2875fe3bfcf6b7f37a60eaffc92de55","ssdeep":"192:/vmIwuHfoWLfIaN6igj74xSkZiHV/ZoOR:/rHfbLfF0j7tICZb","tlshash":"20f1a5c613a4528cd4c64658ef739850731fa47f7aeed5d08a8ecba4b58b8c4f603859","first_seen":"2026-01-31T21:08:57.304794Z","last_seen":"2026-02-19T17:02:28.859329Z","times_seen":71,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/1d8278968b92360e.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/1d8278968b92360e.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"7b35-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQBp%2BKElRrr8gqARD84nqC%2Bwxs55383UoZEe78ciDOnq6KKfO%2BiRjHlFkOJZQMX9CxzQn09sKs6nM%2BAbWsczwP%2Fri%2FHerF0g\"}]}\r\ncf-ray: 9c740ce38d6b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31541,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31184)","md5":"e5179e89d99baf52797f24105189d4bc","sha1":"d974bf4950afadea4a0076927f161eac3dfeb055","sha256":"86f986e1571bf5dda53da18ac84496726aeb00b3980533fd917380d68469a8b0","sha512":"81f677899b0eed324f5f70d95aeb73d92cdc1b0ef95693949b1c8d1fe7361a51c38cc1e114a27f6877dcb966419123e99441da1d18645337bc79facb0cccce6e","ssdeep":"768:qugNIiqWiEdR9uDFyXXyRYgx5RJK+wglNjzjaSGyXOu:q5IiqVts+wgTqSGyXOu","tlshash":"ede2da817411f87a89af92efa0e60462937d7709e0088624787f9e2c772d609b157f7b","first_seen":"2026-01-11T01:55:53.487198Z","last_seen":"2026-02-19T17:02:28.609324Z","times_seen":73,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/d9025b4f6a92ee7a.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"92e-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFLPDG5rxEPwXMfynIOXKOEdwaog0e4NKXg5x5zsItPP0%2BuYjAFsQY54FukYJmdBcMPiz8u9C%2BeaIct0EHX2HAhaPcsyDkWx\"}]}\r\ncf-ray: 9c740ce82dd50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2350,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1993)","md5":"a659a4b0e579811bc5023929ba4844ab","sha1":"d22f81bf0900edcbd60abf802263d8ec80c8f5ca","sha256":"912749bf60af5412f1089a97b3ab5bd639378d17917765c0b01537e8cc49a753","sha512":"4916005e5e2a0b57b360240aecdc5909c87c486e19a985f79ba95011c4cfb1bea15601a4944e22754114b24ba7cfbaec9867fdf3126f28dbf91aba0abdba790e","ssdeep":"","tlshash":"044154e1b671563b23b8059cf2359712b7a7883b810e05b0f15e882d19ec8d9929fb86","first_seen":"2025-11-23T22:59:50.452286Z","last_seen":"2026-05-03T15:31:16.590641Z","times_seen":189,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-madame-destiny-megaways.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-madame-destiny-megaways.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52574\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:11 GMT\r\netag: W/\"cd5e-19baced98f8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i83HoctLCsmL3TmlxwdgyimKBjGziiLdJn3sSZJUPIwVOjR809xY74AzOlXcOTeNyr8sjRoIAWrhyX6ZqnwD%2FJyam5IzJfgK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60eea0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e1be2ee524d7b81d7afa3ad73e9df1ac","sha1":"94af18feec794eefc00b8cc247cd7f0ed6f986e2","sha256":"416206a4032c13027b33abf010179adfefa6d6b089816b9f4146c2f9b09f5012","sha512":"5550d3c548ac37a6a2a7940e84b1e996f47cc3a59d72be644ec1dd470df08b032b11c588870c4a484e43db8e335965e2a8048a7329ddc036749b64c9a6dcd3af","ssdeep":"1536:YJwbIbp0NVLsuIR9vPwG86IS3ZjsUa4kvKWX:YJwbIt0wuW9QG86zRPqnX","tlshash":"0833025d492b8dfcbc7256b8d4c755e72194aa21f93cadce02482f94cd05b2a037e62d","first_seen":"2026-02-01T14:28:11.53032Z","last_seen":"2026-02-01T20:03:45.027811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/1b665a0afce73dad.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/1b665a0afce73dad.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"e473-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3mK3IZOfW4PK33wSsip8hxMP1%2Fc1VUSxdeVkP8VbnA2XAUkU8sRlUSVQo5JB9NcmkwpzdHkjYUtfqIPp7DZqH636u5hpqH9\"}]}\r\ncf-ray: 9c740ce35d3c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32244)","md5":"c2e0d2938c329e8e4e3bb947c411965e","sha1":"eb9ab849c9e0f4a8dbd455cecc450bbee2988bf1","sha256":"fa375e72bdd6a25673f1deb2341903ddb31dde73ac45085ff8146e1a750e7150","sha512":"5af91b03962f20bc171e220cc361e202255e5eaf4777430d72f2dc8780f4da664b1df6d7e8d2c8363720491dfd1b81a022437d4a1359c5f91d76b5d090e60be1","ssdeep":"1536:M7JIDwUDps7xdBmFLkjBnx01mId5iYthtVo:GIbDpsBCLkRx","tlshash":"4243d8d97392743117aa1225907e4107f7b999d0114b8028fa6dcdde3aa449ab2f3f3e","first_seen":"2026-01-31T21:08:57.240408Z","last_seen":"2026-04-28T01:10:54.143261Z","times_seen":182,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 454\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":454,"data":"{\"sent_at\":\"2026-02-01T20:03:07.809Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.30.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"6f9f115d601a4f00b4eeec5e9270c21e\",\"init\":true,\"started\":\"2026-02-01T20:03:07.809Z\",\"timestamp\":\"2026-02-01T20:03:07.809Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"web@2.9.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUxw7kGd7zA39LuShi1HYw7Jj8VnSA0H5oQnljgZL8LYlInwew7Uk1425Lec2M6V%2FGNRYT%2BzJXTvRHnd3Ah1CAec6I8O0z8K\"}]}\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce63d960b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-08T13:35:19.141369Z","times_seen":705169,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/blog?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /blog?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a9117f6846e3f232-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/blog?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTTXwNz5HNpA3U%2BamOknXWin0jf%2BKbWkM2BTqgjMl47OoR5fYk8zsNc0z%2FjQm2Zs0W%2FqFk3MOGAJ0JRnEVg2lmz44agzPAj6\"}]}\r\ncf-ray: 9c740cea8e140b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (941)","md5":"f9bc792cb0cb906447cadd7938d2c89b","sha1":"9db0d9cf086c7870fb5ebae9bafd290d870d33da","sha256":"9c4348589dcf774537fcc2cebe0ecf1bd68747e18e37b6c71fcac97d67be6a8f","sha512":"367b7856b93abacac3fe0ce4b081e68dc3a22d37827e8a37056dd6d1891a80a9ff45cf2197cdd09d84d77125fa02d176dab5bbf62b6388c5a5c4c3aa3fca0098","ssdeep":"","tlshash":"8f519e0dc8499db498c9d59d61d5d7016558bf37f1b88ca8e04bdc64128f03d0beab87","first_seen":"2026-02-01T20:03:45.0329Z","last_seen":"2026-02-01T20:03:45.0329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/games/home?priority=hacksaw","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/games/home?priority=hacksaw HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a8aef5f3d99cdbb0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BBZPfVsQg9g32YJkYjFVOM1EVmZhM%2B0VzI32sWj3jw1kQ9wL2cWx8NKq6fKBRAtlBeYph6OPi%2FOOxXv5Zpfg6LuJeHDbnUs\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"327c-gcFWS0hm+fvwCeKn4Lj2Hbke6lM\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cec6e300b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12924,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f39c92a6ae8f2533c9614b46b524d6fe","sha1":"81c1564b4866f9fbf009e2a7e0b8f61db91eea53","sha256":"ade28fd779d63605ed0a2b8167344d95e87f985ba858156410e028548ed69db6","sha512":"7452a4ec5e4a0d0f20d84343490134db51ffccf53295d245ea983f103391f8a847b74dfac97d8c662e865a370daf2e9ea4ea30ac06207464b9992a6324512af0","ssdeep":"192:A8m6w8qSDSz2jAiD9MunJANd9Ef8JmxEPv7a29G71GDu4AhiEIT8rj8:+/Y710siCw","tlshash":"3b42bfbac4a14ce9930f2f0164c72d0ef4bd2a2330c81ca97919ee78e56dd97e51725b","first_seen":"2026-01-31T21:08:57.359105Z","last_seen":"2026-02-02T21:49:52.856279Z","times_seen":34,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":666,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a4ba790c3d927cae-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FQ1OhXKlLUZewVk8lzBOX%2BniFblZYBksxG8hHkGIpybAh%2FTkbq9oHUeyqlD2UYbP02Vn0PM2vRCW%2BW%2FB4t8j6pebJr5TIWT\"}]}\r\ncf-ray: 9c740ced9e3d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (821)","md5":"bbc959ec3ac9c9e34bb62de007e926a3","sha1":"038451702814919789945137b023d718d7befeca","sha256":"d4c08b840fcaaead99b209b036297cb25ecae41d74e266d7740641be8a3b25ec","sha512":"c211a13769e8f75b0e84fc0610a4de8129cb28c5286df3f295efdc52248701ceda68804dcd2e8e6628502f839d3a848f006e4698b5635f94ebb0dd9b6282b67a","ssdeep":"","tlshash":"d8417c0dc8499db498c9d59a71d9d7016598bf37f1b88da8e04bdca4428b03d0beab87","first_seen":"2026-02-01T20:03:45.036147Z","last_seen":"2026-02-01T20:03:45.036147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-le-pharaoh.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-le-pharaoh.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36018\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"8cb2-19baced5a78\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmohcJmtQd7LdynDAMcgIa5lq6w17ACYrmD%2BqQ%2BLEz7CEuiLjzPpDoAz15ktnz3rH4lmhXlRKQnnPSndqCbBFasyeStCQPkK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf3feaa0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eef0ad4df3f18476c23776d6ade5b8c3","sha1":"1f4632075fffd8ce6dba2f12b74403d5fd213e8f","sha256":"0ae255fe98169778c1d73322315862e7908663d644bd85743d03c7935fdb6279","sha512":"d5db78cc4c0fde7a769c483e97d40d8a412c4b402c7e223b22b582121a8ce604f19fae102db29c9ca49590d1f541fbbeee1184dd2366144de7086e21573a54b1","ssdeep":"768:HuH2u8FlKRaPQ+UnTc4FMCtJ+i0rLHONzlufIi5unk6O31AkI:xoRaPUn+JPHONzwAigk2kI","tlshash":"e4f2f274c6950f9bd439be7ea9b08f6a209f702fd2dd1e41b4ee95085fe836080b1635","first_seen":"2026-01-31T21:08:57.362214Z","last_seen":"2026-02-13T04:13:07.605732Z","times_seen":35,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=17b3w","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=17b3w HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-97188feee89491b3-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=17b3w\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mEzVp1IIo5QkmHQbAYBcivofIWeBWXWA6qReOndjMk2n6hu4VvZy1qFnuvtzv9eoLJIoQA%2BgOTlKTADbqhwjbcpCAaP%2B8xUQ\"}]}\r\ncf-ray: 9c740cf44ebe0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79133,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (30881)","md5":"9719dca536e971d7e55b747f4d13ac09","sha1":"cec6436d4deb141ebbb91fb2cac7e419a6fc5c2d","sha256":"771ca4e184dcd37ff06ffc2e1967d9be160bfe15496a3b8f2321048c6836b1d5","sha512":"db503614cc3a674d8cbe16e0c36b60c5e1714379fc23538377b24c6915a3fc27ce832d922ca7e6de75deaf370b1b052774347a8571cac022e562f345933459d7","ssdeep":"1536:qIqaSjKQqlrFsQatbmhAzKGlFROY5TXkV80mye:q5qlrFsHbmKKGlFR/57kV80mh","tlshash":"ef732c1bc80efc680d66de9c3c5f1b7796d9c87399304c9cea9eccac01595279baa1d0","first_seen":"2026-02-01T20:03:45.039173Z","last_seen":"2026-02-01T20:03:45.039173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T20:03:06.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duLbzojGSMY%2BaMYNfRbzM5AJOxHoUSWWc4%2BgAN2j2AAFzzvq%2B7t9yQhtpLfS6Lb9fBuclLetcDRgg2iXsTjFCabnVMKDg2N1\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c740cdce9c456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":187479,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41817)","md5":"d66310974e6ff6c25d578484711346ff","sha1":"8e84918d3a278c2a85bd56fe8e2f353c5937342c","sha256":"dd494d0cdf3cf0a3c78bcb0c444def57befd3b1348a7b806e405afd865ed0f29","sha512":"b51dbac7fcb5be246aacf1fe162e6b3ea945100dede7f8541e10a33b57ea8b4484c241132018267c3a3a883af4764f7ec0fb4329058ade25899970e808b8b74a","ssdeep":"1536:B+IgbnMJViNyX7AVPYSsk10aXs76M/2yT+VvzrAGJU4B/i2f38pMZcUlxFz:QIgwDYyD6M/2yT+VvzrhJUo/i2/8GtD9","tlshash":"a704716ee80ae958ec56ed9e113f5f3a94c9c8778631c92ce3ddcd98015243a4be9dc0","first_seen":"2026-02-01T20:03:45.041809Z","last_seen":"2026-02-01T20:03:45.041809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":59,"dns":41,"connect":1,"send":0,"wait":825,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /ph/static/dead-clicks-autocapture.js?v=1.318.1 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: HIT\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\nage: 0\r\npragma: no-cache\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.70.251.208\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJxzH7w5q56OarRUe4HXqST%2BmqWknqWKgwfu25iCqahVHSz9UHww9vZfYmHhOq970gmUeE7GVWFKCMoz3N6d3frW0%2FJ4H0fC\"}]}\r\npriority: u=3,i=?0\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-ray: 9c740cebce280b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/reviews?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /reviews?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b75e9da944337ca3-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5wyyV7xpAzk4b8Es6Vt2bufC0UG1AldNoMOg%2BDPSBvPSIpe%2FqXrwQ2Cny6V9CGIIQJZM9Nyx3fVEINsqmnJIWOEM1gfdNHu\"}]}\r\ncf-ray: 9c740cf72efb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/reviews?_rsc=bnmi6","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /reviews?_rsc=bnmi6 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-94834c90e4b0ed00-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=bnmi6\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3B6kMwP6cbCZjCESJlA9uyFriLy0BBkAsl3pc3tNPVqrW8OvGwziWGQBJxDngMQ9gxYqs6boZ3Tcn37cAiIk3w2PbZV%2FNFn\"}]}\r\ncf-ray: 9c740cf74eff0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6620,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1621)","md5":"73d5264a0dba25c87816a3ba320001f5","sha1":"6bfbd8d70bf048f5544b5bbd61a0097ab74fa6fb","sha256":"d04434bf7aa769d7a798b1c66a9a6b7d3f671b6d53357a623b441e54e5372926","sha512":"abe60de2e4aaf72f9550f1189f97102af585892eef2d428919e6f013dc3a5c3295912486a420aed440d25d9076c663f7bffc5928570cc6f77800eae5782c184a","ssdeep":"192:BnkJZV9snkJZV9xnkJZV9TgkB+UeJ1EfSv3:yhCTgkb2","tlshash":"67d1a5abd80efc581c36cd5c6c1f977796c9c93389344cace7adeda802190232b991e1","first_seen":"2026-02-01T20:03:45.047817Z","last_seen":"2026-02-02T22:33:10.159767Z","times_seen":34,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/vip?_rsc=1uaok","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /vip?_rsc=1uaok HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-8617bc04e014ec44-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/vip?_rsc=1uaok\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YW6HVgwHwzIyfTZ829BHW9RG1YC6KwtNu7NgYx4XTIw1XLkWlxyfluGKqq6KbkuaxaxnvbOwNNV5qaIAVF7mIqTN3SQUrLxZ\"}]}\r\ncf-ray: 9c740cfa8f600b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18091,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (5965)","md5":"d4f5c819e46918b6a3ca1613ce0eed28","sha1":"3850f198bbb47a1d1b560b7e2797cbdd6dce3eea","sha256":"b66f1004531d8d507dcd0a2c0e86b61f16939aca410ae5092d6203421a2e95c6","sha512":"07394b7bbd93aa3691fe1584f301da7c0e90de09713364e1c8dc57dcb5645ca5b4fd10d180bb939127fc97bd13aa6418425e676f28a126f51ac91f9dddff43e1","ssdeep":"192:dlnkJZV9vnkJZV9pnkJZV9FnkJZV9rKnkJZV9pnkJZV9+nkJZV99ekBdFnpYj6uL:s8KW/Kn9ekf2wKVCIJ/3oAD","tlshash":"1782fa6bd81aec640d72dd9c3c5f97b796c5c8338c344cacea5edc9c02594275baa2e0","first_seen":"2026-02-01T20:03:45.050324Z","last_seen":"2026-02-01T20:03:45.050324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":467,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/group/slots?_rsc=d5bdz","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /group/slots?_rsc=d5bdz HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-86a81f467b9a2ffe-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=d5bdz\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfGnwMlK3QpeXA%2B%2F2SOX8drDtiK0dZ0CrZCnKOxb81pT1UoDohARkvsqBqW5%2BYFyz6mKRcdswEQS3tEAuN9SsKQz%2Bq2H8PAW\"}]}\r\ncf-ray: 9c740cfb7f700b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/c99dd6f2193578ac.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/c99dd6f2193578ac.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"5e51-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fv%2FHSS5UyO9NGj5OAuuAeX%2BmkE%2Fm7OL%2Bo2Jq77UMOZeF9KkPIdk8jrZf%2B2bg2vCS%2FyMofdVPyYLaPmejdwl%2B4ruj5JBBYsCh\"}]}\r\ncf-ray: 9c740ce36d520b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23788)","md5":"5eabe5602d90013fa15f85a6fc6f890a","sha1":"2312e373488bdcd197a5189f2d76f272fb825fb8","sha256":"815a58522bb2f49c1bce5d54f1aec6e5c9c4fc41979d178e73397fdf65be846b","sha512":"e6d61874e6296af415a21d9c062c2657b051412569585b0aef4f2179d2d603fe640df9d8fe39b66a404d803fca621bf673ff3fe9d7ddd6cfb92a5f50852a4f6c","ssdeep":"384:N3+WOa/L3dxIv57SwaJAHTMYGeDFp3TXLvA3oLgxINGug/LecP+nZYr+gbYchU9R:IeOTMYGe5hjvN3IecGnernGmQFUM","tlshash":"92b2e9d9b361b06b53ab61da403f0405e2fea974251d096ce754d4c3b8b8ea990f7f38","first_seen":"2026-01-11T01:55:53.456823Z","last_seen":"2026-02-19T17:02:28.729415Z","times_seen":73,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/vip?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /vip?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b1fbeb68ee4ffcea-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/vip?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sg9Oxxw4NLEElshs2ZcErMpfELVkiaKnD69g41bYuaDewzvUs6i4k4Zwo%2B3YHqkitdxZelsD9PXv9cGGhjP3Q%2B1oZv2JHWqU\"}]}\r\ncf-ray: 9c740cedbe410b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (939)","md5":"9e68e5b7c85840b123e136aeb805476a","sha1":"157284b2024ea3db579acd35cc45be792415f921","sha256":"44ed3a5ad2f9350aba61b0ec0a61cc99b72ea7bcbee7f94312f81db60c77110f","sha512":"aada231fd5f587c3eb72fc52fbdebc59d95d1e3f15984fedfa4dd7fa0c68c95f76fa86a68596503dac02bb96372d2381cb82306096c3f3ef2373e4127f6b81a0","ssdeep":"","tlshash":"2f519e0cc8499db498d9d59d61d5d7016558bf37f1b88cace04bdc64128f03d0beab87","first_seen":"2026-02-01T20:03:45.055374Z","last_seen":"2026-02-01T20:03:45.055374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-donny-dough.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-donny-dough.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30514\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"7732-19baced4ad8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uv8J0AQAssImxxFjmJIRWCUre1U%2BpUqnZBSyzNFTLNtDQs%2B7sbHcjOtPCgr3nvOLGTiYfz5JSFJjJxHG%2FC0qawr2tR9nmM2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf18e7f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4171dc1a1a334314ba5bc7f0be41d58","sha1":"c187554bd131cd950d2bfe037af0fb46a16080fc","sha256":"6909f61ba82913dcd5b864b9547748fff1c16f8e083a87b2aa538156f04a15de","sha512":"569250a35f12f1be2a245beb21157bc1f5bf8caaa1f38cd4a3978e53e55b4c9e83ba678258eb6df66d9196fcb0e5646d136b3bf220d53e97d2930d628696bbed","ssdeep":"768:5hfV3g8UXWRyJ19h78pYeuoEhnt+bLjozbzuBj:XBg8UXWRy/958oowcXjoXzAj","tlshash":"2ad2f1a3b645a308e03619bd415bf46fce1e7eb2a5ccd692742cb723841d0860199def","first_seen":"2026-01-31T21:08:57.202381Z","last_seen":"2026-02-13T04:13:07.578414Z","times_seen":37,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-marlin-masters.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-marlin-masters.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31090\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:04 GMT\r\netag: W/\"7972-19baced7da0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qkw2BjwFXfespCKL8okucvbCYRWWd03NbsaHtZO%2BujiTEwG3Y%2FzAPkIxsHBowmRBfkV9%2BTr6DmJ3001bRUEy7oaFlDLwBx0x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf1ce840b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1685b07e3a5ee450b80ca5578a6928c","sha1":"f9d81e1a083f786a54109554fab8e75ceee5e830","sha256":"3d5185f2b1008914d65d8f406012fb4c2e66cf4fa8df658a4c55eec894eb2137","sha512":"ff1d2c7ce4d318cebd8e548a418f6ce597ca178ea1aaecc396bd3a78509d7f3127df5d23e8c0c2f6ea98e0afd406a5a278f5fec4d89df715e8b3bafcf43fdf00","ssdeep":"384:M7u9rAYxBkq17Ghs9wIDU0CmwgwZdY4tmZy99PRsEo1XqBj/TVc8fq7dmBKTiv01:h9MYFIHIXbKY4t7959o1aZTB1BPG+o","tlshash":"a6d2d0fb0d1f7f1052e52986fc04b436c88505dca9c76f9ed296384dd6298b3bd6c0a6","first_seen":"2026-01-31T21:08:57.348989Z","last_seen":"2026-02-13T04:13:07.555945Z","times_seen":36,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-divine-drop.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-divine-drop.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23060\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:04 GMT\r\netag: W/\"5a14-19baced7da0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSC9nKtl5dfTvkbJsut3EUjW0ok6gQcNL7rpLJ3XuOt55OnPZvZtnfHwRq1CTFKZaB8seSosL4%2BbePkFgL%2FzSUWBaXhOObFK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf40eae0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf1d166378a3e9065cdd99144ba2fa5b","sha1":"75ad449df9c3d0eb8a06c5c1d946b52cfd38a7f3","sha256":"eb98ddc75576034d4e35aeb2c3e565016648f906b84ffeb9fc20bf190ab6ac34","sha512":"b3d7996ba21114f67b686ad66f85510db432dc1e6b105e2a76fff0c7663b4535c2a009cd13f648b6eb46311ae95c5cda90e5c31ea07c05d2156c6d7a8fd0596f","ssdeep":"384:BTLgQaOIzze7Q/ArY6Pwnyd7ep/f2mEE3beL6o6hJH7LLuS0pcD4k/D7CLpUQx:Izze7M6PwUQf2NErc6dbfd0p6VbWLS","tlshash":"20a2e1118f55000b9c279cfd1f0584a4ae7087c15ea8e9dbf66e5e8e26f41a47f00653","first_seen":"2026-01-31T21:08:57.228575Z","last_seen":"2026-02-13T04:13:07.620297Z","times_seen":36,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/bronze1.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/bronze1.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4618\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:46 GMT\r\netag: W/\"120a-1930f2383b0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FeImyGDD2yLr%2F4rHfkBv3Ars%2FblRw%2BrJsZlp9sqvtVoC2kjpZKRMB1HpE34hJRFjafF8H2QNpDVf6ka%2B235h4dpI52lVxOS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fedb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37711ce0075cb6d2e33d9fa53d581193","sha1":"ddd492c746acac43247ae3f6e53e0bbf0e6036d9","sha256":"27826149f40ff6caf6ba30192fe08ff3849f92d7f7a65bb32f3d159c89680ea5","sha512":"f312756bb6fe212c0b9f9f42f0aee2f2660c5d17e2fb0d9395afbda3d13465849160fe8c5cb4e3f5f3862268dc8692a82115e82b5636184055dfa71c421f6032","ssdeep":"96:yrZBnH3hr9w51Tx6v49RdgzuWl5aSlcaRj9E3sxjIiD/OisK5:cnxRw1Tx6vEku253QcjIFHu","tlshash":"14917e9a1dbcee60a611ae879f200d3b4891851fc1384fb2bc56da69d709398d3d2344","first_seen":"2026-01-11T01:55:53.480446Z","last_seen":"2026-02-19T17:02:28.719612Z","times_seen":47,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/bronze5.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/bronze5.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8686\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:00 GMT\r\netag: W/\"21ee-1930f23ba60\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btaA6n2iwGWpkT04hyOfVMIEa0KBF7ZLcgYKbARgQVYlpCvZ3AlS%2FWX5ZqXVmdYNQ6L%2FKLB%2Fk5K7%2BhRW%2BjcZnqSlD%2Bx3G%2B8E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60ee90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8bb7c24e714a2343bd7376bcececc28c","sha1":"dd8e3e1bac6549f1c2c07301161445a8e204c576","sha256":"e6e730671b9e28a68c484ad224ba082be47b63d6f50d35058be5c8749d149994","sha512":"a0406c763f49f304b3283e093246d2684babc785b22caba33919ce2a0458673506bd49ea27d0c532c4dcf0a728425082cea0032085800b7ada2e705a253b33c3","ssdeep":"192:mFYCuhhN8kts7Y9iA8xIp/9LTY/EF/n6FBZdVL1a0wgH1qz3dZPBB6:mFYAks7PA3k/EF/naBZdV5ahS1O3ba","tlshash":"d802bf64c24c5b930cd8b832057ad21b3bba1a0d6ab4ccdf44652537cfdcf8296bda44","first_seen":"2026-01-31T21:22:35.122467Z","last_seen":"2026-02-19T17:02:28.646712Z","times_seen":31,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/b699731cda0020b4.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/b699731cda0020b4.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"3bc9-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGEQOOIcEvdMS8wBXEmIdSdlDYfn0RFgWE0W1SZ2oKNLEvcolCTGDuFSrlDar%2Fzp0MK8R792xpm16SR3OCRPnzSZIoXYIV07\"}]}\r\ncf-ray: 9c740ce37d630b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14948)","md5":"40440d0a26afb7694208aaa1124c32ae","sha1":"92e8a42be6d633c2e1600636ad212c413efc6dad","sha256":"5e5beddff18019122661132c259f1c8997d53a8136edaf8eff390948b963c9fb","sha512":"81a7ea351def4c29eebe87171688734b80801a7e40786a86a551687cd6bf81530a7f543c9fbc1fb6f4b42a857fa970238926bbcc24ada2c6b2b2d7389d2b0e08","ssdeep":"192:OqB5qeZR31Jm74v1o0n+K8jvZnSGQpXeXcBorSncmMcRD1o26Ss1RviE8VSTtrSF:Ooq8RhKnjvhm/p467EIa3XDoOar","tlshash":"ba62f7e576d2f071a3ba1ae6d03f0056f2691db4240d1010f369e4f9397489a86e7f7a","first_seen":"2026-01-11T01:55:53.572093Z","last_seen":"2026-02-19T17:02:28.75444Z","times_seen":73,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/group/slots?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /group/slots?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-8c3725b46109b647-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gexbUIh2nLAggtpru42W1YA%2BbhZetbxCg7nC9oVRj7OtlXrPOfLZS64vGcN7ZoPWBosotRTNbG%2FwMRRkHLkc5C6ZevlmwWG8\"}]}\r\ncf-ray: 9c740cee3e500b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2573,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1064)","md5":"56b2a8d0f4de100b6867ad647187f191","sha1":"3ece7c9379d2c91d706fa9816a432b71075d8975","sha256":"d046dcd314057abfa8dcf0e0c7a4ff12e7dc49723869ff11f3d8789ccd20a166","sha512":"397d6baa91e5fd589c69d31b55ac763e4e8b9c49f3e186c605597fb52d11ef9092ffd162c78d2be7fc8beae5c68d18ede0a39008790b67ef08a564b5aafd3838","ssdeep":"","tlshash":"5c519e0dc849adb498d9d4d962d5d7012694af3bf1b88ca8e44fdc64138f03d0baab87","first_seen":"2026-02-01T20:03:45.064138Z","last_seen":"2026-02-01T20:03:45.064138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/home/promo1.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/home/promo1.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8944\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:32 GMT\r\netag: W/\"22f0-19b7b5d9fe0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oKyNBbjCnhqyf2x69j6EwVoiYCu6R9Bh6xsGx8pkAzYnCehzmODAm3jmyFzE783VX%2B34YvyRj6Tgt5kgh2NUja%2Fp92Tb0ZU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf3fea60b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b8130a91fb4c5a77bab53ac79c0d1a4","sha1":"69d9ffa75456675f8ea57bd2e63c92c28cb9e418","sha256":"d55c522b42c801b1d691f66a300b86f5d63453f56ec6cc13eff9a4e59c680fe6","sha512":"948adc9e24f539d7318b094c262e885d65a38ea348ee8cd533c40c646be5c12adf899efb4495060dfd289687f9ce2d818474a8bcd1f055e080088348eda78575","ssdeep":"192:igWb2C6F5XTxWaehYqbPay5DmmHKMaYU2UWzqTGWAF:igWKC6HX10NbP55BRJU2UWkRW","tlshash":"c102af4fd4a89b154924b2bccae79746e00dbeb85a251f683c6cf4eef625102901cfd5","first_seen":"2026-01-11T01:55:53.489214Z","last_seen":"2026-02-19T17:02:28.760725Z","times_seen":73,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/bronze4.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/bronze4.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6582\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:57 GMT\r\netag: W/\"19b6-1930f23aea8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3i6hHpzX5NIZ0SlRXpe7iNUk8yXCx1EIH47ZUDA6iDrXAckOcSkWpOOKmp%2BBPOZ6rpabUJx6xl%2FTnurFCSow2og7FaNzzYV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5eed60b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a153962749a5459ac17875a0baff838","sha1":"bc29c37a2ffdbe7656dd9e9ede3a21908038a17b","sha256":"ba213d43d47ebdea2c5b427b4b2ae52909634ab1c93b0314a56f43d6d151c88c","sha512":"685f2826ee3405662169d931fe00d56574f960af891d081083baf3967f0bdc4a03b926f3756b8959da06d0b37d51af0b1385304025a0d67fe99018b18e7c797e","ssdeep":"192:Bnl1O9Y51wWSQN8/4JFxTYiCDXJAR3qsfK73qSv:BlU9YX6/4Px0iC8fK7aSv","tlshash":"a1d18f5d6c4b1532ac478653aeeb9b4017f29c82172ae7cfc2221abdcef185426d6423","first_seen":"2026-01-11T02:03:05.502475Z","last_seen":"2026-02-19T17:02:28.792123Z","times_seen":27,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?action=register","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?action=register HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-aea22865a0023d12-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?action=register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SA4kJ3VPoXvrwaYRHmvQ0nzYTC6BsdkJE3wt4lMHjxg5UxCj1jkooxNo2wEWTkk5GyzCgj4dvTZaxflSaZT3pQBpfI2SWNN\"}]}\r\ncf-ray: 9c740cf64ef10b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (821)","md5":"bbc959ec3ac9c9e34bb62de007e926a3","sha1":"038451702814919789945137b023d718d7befeca","sha256":"d4c08b840fcaaead99b209b036297cb25ecae41d74e266d7740641be8a3b25ec","sha512":"c211a13769e8f75b0e84fc0610a4de8129cb28c5286df3f295efdc52248701ceda68804dcd2e8e6628502f839d3a848f006e4698b5635f94ebb0dd9b6282b67a","ssdeep":"","tlshash":"d8417c0dc8499db498c9d59a71d9d7016598bf37f1b88da8e04bdca4428b03d0beab87","first_seen":"2026-02-01T20:03:45.036147Z","last_seen":"2026-02-01T20:03:45.036147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/auth/getSession","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/auth/getSession HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b1735f9ed7a681a4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 43\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2b-dGnJzt6gv1nJjX6DJ9RztDWptng\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkT%2BPulk07JCwj%2BWckjl0pv2wsFE5eNeKovmITWKsioEvpoeszGA091VymBNDxapRd2ryBZcCvHCrjpBBlkxCbqvPrlCMzT4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce83dda0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a35da7b2f88e0b2a1d5ebe0ec06102bd","sha1":"7469c9cedea0bf59c98d7e8327d473b435a9b678","sha256":"e1654c7ad9ce4df238c7c18cafe8b85a27ac81155501831fcb1583963308e9a5","sha512":"62b900bf1f8d35e3df1cac72810891745f874b0dfd4bcdc5da1a3f761cc1cbb934f7aa5c65f3c2692aa48860f0384333933fb3fa7d4051254ab4a3935f6adabd","ssdeep":"","tlshash":"f790040014043d3777514105710c5535cc13447c51411053154c453c45435c44007500","first_seen":"2023-10-23T05:59:08Z","last_seen":"2026-06-08T10:57:59.383214Z","times_seen":393,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/providers?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /providers?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9f02957ea8bac4b8-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/providers?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xhcs4%2FdoWXA274%2Fp%2FOMtrc23PO5FILA9gxKDtp8X9AD%2FcYEvvdBFqshrQn69lJL5Rd5vqMuatkcg5jn5BcD%2B7CTAWuuCKboj\"}]}\r\ncf-ray: 9c740cedde4c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2460,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (951)","md5":"fa1ef0147c60f0cf3c8d16d7a45e066a","sha1":"48f2b8d5239ade4a4cd0e6a0437c12e1ca556c46","sha256":"84958ebee5405b14f8d1b412a2b748961abdcc2aa0bd5719e31fa4e58eeaf148","sha512":"785d3f3d3933c4aefcef7ee4c3b368694cc213de8c9411a187f28ee505bea4c7f1b708967272972b8578d2b84a68dfc64c9e9131cc35cd3cf8dec74b35d80811","ssdeep":"","tlshash":"0151ae0dc8099db498c9d49d72d5d7016588bf37f1b89ca8e04bdc64028f03d0beab87","first_seen":"2026-02-01T20:03:45.069703Z","last_seen":"2026-02-01T20:03:45.069703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-cloud-princess.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-cloud-princess.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32090\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:58 GMT\r\netag: W/\"7d5a-19baced6630\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2B9RJliCxU8jWnVmoP02yyStABj2NBmwqGlRYsTYZS4yCKGn6YIseoLhbEUplNTAe24DgGMZOofLT1eyMcM4szdUiIol3Sp7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf40ead0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e4deed576c135db37b273439fe6d657","sha1":"477b328b08701f26d932a951a3b4845eceac2df1","sha256":"790f77312bba30782de05a545144b4774a39bfe688314f46cdd5c9e08179a27a","sha512":"12464171a1fd127b5ec984da1404916d6a62e3e133606a3784fd6ff3177b18cdfd9e13438338ad3d5d084401080c3e4ef24b0c4d4e4e1c4080e08d85903f009d","ssdeep":"768:SR8geZ2RaJKaS3NTLfqbkKo/tnP9SmgQCeNqN4YEzdXSnH9wWY0q:SR5a0j9UQ99SmgQrNqN4YSB8dwWYz","tlshash":"87e2f12ec094d9a78b209bb1f470ae48d41c94d6ca6d680cdda5c7f539dd086f132ebe","first_seen":"2026-01-31T21:08:57.213813Z","last_seen":"2026-02-13T04:13:07.551434Z","times_seen":36,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/bronze2.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/bronze2.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6166\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:49 GMT\r\netag: W/\"1816-1930f238f68\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNI5CG9XltWvYFAfsm6E9KZ%2FHb%2FvxOg2qApMqZaQqnd%2BOiqQj4N7xggzSsxPL2Bg38Co36VrTJeFY%2BKsm%2Bu76IN%2FPlxf5%2Fs3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5ded40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0294eb179dee9507be7985f582da780","sha1":"4184da36f1fdc5d6fc8af440c3bd23f3641c0fb9","sha256":"ace7871d7d2f5adb69aea242ce7616bbc8e042327add531cd34be44041e2f21e","sha512":"369d903b083bb67b8ffac89bb6df8e5b451d6545df956d0fa631c8e4547bca0a6b0f1e21e1ce4f1f68cc3f31da064a869014cfcf37cac8708444bc367d056c0d","ssdeep":"192:2CsTxSBvEmFoRPHyzb04BFHbbPOM1FIqhELq:wTxSBvIVe4SF3WoFlELq","tlshash":"0dd18e72a6f7457c516b05494a14b8e1a92abc26ad91c60f067680f6a2d00f289fdcf1","first_seen":"2026-01-11T02:03:05.487189Z","last_seen":"2026-02-19T17:02:28.727051Z","times_seen":35,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/AztecKing.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:25.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/AztecKing.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976194034%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81088\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:26 GMT\r\netag: W/\"13cc0-19b7abf2590\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7grETgzuawmW8KyMMiMnfIGA2HnqkvtDucidPmQxygb6nCLrutC106zoUlHscAk1pC9AU5QPK92vS8UZarBDCmjBrLqa8clT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740d52ec850b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 816x1092, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e4be35eb68a9765eb1568d6d2c5c4375","sha1":"42298be27868be3b95a28c82d1905957979796f7","sha256":"1f84f1fde5faf9e860d90dee33d12f89749221004e25120b8d198c07d55ec66d","sha512":"eea3b47559712e6b7de60b39a247447c0758b2a832d4f40ee1034f6aca6b9cdcf898bd26dee6f3eb10c2d9ce21a5a8ad6c001d411b7dd2dfc042cb8892abace0","ssdeep":"1536:6AYeQIq29oqkrO83o/G+T5wpYxK7+VBH19HnrfdiOiFzQ:6NeRq2uqM/+jUYxjVt/HncLzQ","tlshash":"21830281aeea213b7b69786b114754f59c98c4b8f2a01d71ff28dbcf8324760f635464","first_seen":"2026-02-01T19:16:16.975627Z","last_seen":"2026-02-01T20:03:45.073074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Inter_Medium-s.p.93090983.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Inter_Medium-s.p.93090983.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"6476c-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iohnyvuQeMx1zdzdMXOngrt6NnkDfu0W6T0dzgNZl66t%2Fil%2FXTQanXXSkl4xk6y2vLGNK8JmZKyeuhvL5g6vOkuBArjqfvNS\"}]}\r\ncf-ray: 9c740ce34d2d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411500,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter MediumRegular4.000;git-a52131595;RSMS;Inter-Medium","md5":"a473e623af12065b4b9cb8db4068fb9c","sha1":"126d31d9fbb0d742763c266a1c2ace71b106e34a","sha256":"1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146","sha512":"1fbc2841783140fe54f3ab1fa84e1ded2534bcec3549ade2f513491b32178df515bd63a0a4a2c35017a6850ff9c3a24f8602357d912acf8ca92b8d68ba846d3a","ssdeep":"6144:D0RV3jlWkDOh9oC2wuhsJWPziKSQlRiFy34YmkCD9oI0+msvMlwt5BO2x28YzWDQ:D9SxC2wuhDPziK2yIYmkCCIPmsHI8F8","tlshash":"48945a17e706db0ece562d34cbf587d033a9bc91781ad247b16a3a19ce931b40ad71e2","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-06-04T16:54:35.364241Z","times_seen":243,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/84514c7510b6b9ca.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/84514c7510b6b9ca.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"3d94-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IORyGLzPIK4qSIXBvNB7THZ5Nh0oqqm%2B2giksG0PXN4kEy%2BCPGmJVdlWUbQG3yY0eRpim%2F7SeMqcHDvUYQVBf5TxuuqrYRGp\"}]}\r\ncf-ray: 9c740ce34d380b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15764,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15407)","md5":"d51af061e259b2aac980c62c2a581cfa","sha1":"25dc5232dd34515d64d445c772aa386d15a843bc","sha256":"a058a237f6dbe04d72f900d5ac0cd02aa6c68aad91ecdfe74aeb81a7c23b3e3d","sha512":"b9977395310e5f15dcb8b94e1034cff5d09ec28908599e6d68a3fdb453b3d9c805e3eacfd9b42d7a1e156027d445600a5c38c8d5f350f92a79494aef77e1bc30","ssdeep":"384:RqybOz+GjHeaCgyP340BAg9p/cZNRAUL0YvK6dD:Rqyaz+mlCgao0BHl4RAULBC6J","tlshash":"ab62f9e972e6fda383a74194843b0007f6280d76145ea4e4f7e8dcea356094e91f2f99","first_seen":"2026-01-31T21:08:57.197191Z","last_seen":"2026-04-28T01:10:54.101669Z","times_seen":182,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/0645c0b51de69014.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/0645c0b51de69014.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"22b26-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceN0GciiswyaIq3ICpkXP%2BoLgvXPzQd4LpqdRraUr79pE%2B7LYi39lMkN7xNrbG%2BXQpjzHrIfwYvcxh2rj6FWMHX1ddEY%2BslA\"}]}\r\ncf-ray: 9c740ce37d650b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142118,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47084)","md5":"9d45e69fbb44e738a07585f4a0e2cabe","sha1":"f8c9b2b7850b1007e4a64aefc1ea360954543a67","sha256":"0d3e866fc5f535bccc02dfbc1d9f5e717a06924bb1e2b7b7a97ea0b61c4a4006","sha512":"3c2a7ee5db4ae2941ec7ad4fff26f5672244af08fa839e54fd6efa302c1e5b43978de353aa5bcf3c96e9a0e8e5c8a2a693d962aa7f8cbc07b46435e5a2098986","ssdeep":"1536:6ofZm0sIEZ/gaCN2wIXdauLdKeyI+9DMvOEle10XsDJ+G6H4zJDVlDJKkTaVQcGC:QoN2wINauJXTT4z3KkLoN","tlshash":"1dd35be57140b5f85b6b42e1e47f8208b23d2978940e4468f3b92cfd22158dd71abfa7","first_seen":"2026-01-31T21:08:57.271535Z","last_seen":"2026-02-02T22:33:10.215161Z","times_seen":67,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-scratch-em.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-scratch-em.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26124\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:56 GMT\r\netag: W/\"660c-19baced5e60\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wj4tLFEv9qE7%2BQWgJ6VWF%2BSe9w4q%2BMzE0suW0Zv%2FrkT0ya1q1Qq67GR97Mf%2FMr2SKexMIauqZb7GizMxJhmLAahqTdw9l8We\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cfddf810b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26124,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c70e84a7dee7825ff08b3c6136702e65","sha1":"e67e273ffd747bb60d133b009a34b155d3040ce9","sha256":"da815cece27f0a17280e1efe11bc845de79f1bb8a33c729f11daf88e6682345c","sha512":"89c9673c00d5682a58ba55b116ff2dd809c73fc4012aa3798419d205900f5f0fad5f4edb997067e2e6d13cefca96eb6a3d6f3487289a2fc5fd15d02836db7f50","ssdeep":"384:6EflvBtld25EbJNxRWvoMoRW4L01GWsmQh/eJ1vG4EnFsBa9OeU1WOmAJdY94Gnn:7l3DWQPJWsJiEnFsBa9XU1WsfYDLr","tlshash":"35c2bf5aa320cd00c559ab709ced8154f7671a808e58e35effecd9834f688b5deae0c5","first_seen":"2026-02-01T20:03:45.077826Z","last_seen":"2026-02-01T20:03:45.077826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/3d29fa3d9e6cec4e.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/3d29fa3d9e6cec4e.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"18e2-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCQHFuaR6asWx4ne66xDT84mE2hWTehfz8eNI0aNqbUUr8pA2b%2B9rcue9YdTFUPRyVzY1%2Bdi7TWg7FuNRq5tsmIaxd5EkHvs\"}]}\r\ncf-ray: 9c740cfe0f850b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6370,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6013)","md5":"103bce398bf72f998ccceacc2ffe6e80","sha1":"db2b28d3061395776a370a3539b6ae3bf15d9dce","sha256":"29b058437c3f7686ecf84d33045a537cd24e4f01807e2af5cec8649b51b1dc18","sha512":"10f6ace8ef1373d40e4d4376c214dfaa5e4a45a1dd6a6a0106a59756da63c78791241555c08f24471707cff6fe63ed751d2acc6a6dd00b6ca7538073507e54f1","ssdeep":"96:v0dZm2etxGIWIA1srSVMS7frIDtjyMB0whWDxcxv:R2efGII6sr8j7focv","tlshash":"97d1734891969bdcf5b704a8e92e816cb06d5fa5cb5d0978f9bd38351e000d07e69bcc","first_seen":"2026-01-31T21:08:57.217994Z","last_seen":"2026-02-19T17:02:28.862354Z","times_seen":71,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/f481d12fa6115376.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/f481d12fa6115376.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"46ac-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLG5OPP7OdvS6gRl4NYRq5EbTErefTJkPhRyicI3qZ7rwQcHJySHHguBwCd8fOuWYMn5ZTiWRMisyAtNLC6oSge4ObvtKs1u\"}]}\r\ncf-ray: 9c740ce36d510b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18092,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17735)","md5":"c4e41c714da5a9df953f2bc887a8be30","sha1":"23b51314442a5d523c045f83e46a8cf27ac8b29b","sha256":"f14145c9cbd9eb49621d7bae4751666c8256d371c32bec3bec537995e913b579","sha512":"a42dc09d57cd64f5b8156cac5a68d4b1f2555eb2021d6fe69bc1b1994547cec0e952745f5ebfaaa6f316f3fb3dc05c8fc82999b496523dc791d4c47875c3af2a","ssdeep":"192:F4SCYqp/cVReSok7GCaTBoypywK89KkKlVqxs9VSi1zPLSGDQma7oZLrBBBZr+c3:F4SU9IReSmoy88vSMAzNNdH/Rx/","tlshash":"be821bb52b54f470e2fe81dec1270829673f3b1e210a5435f17f8ced3924a627256ba9","first_seen":"2026-01-11T01:55:53.525125Z","last_seen":"2026-02-19T17:02:28.607716Z","times_seen":73,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-98958d47ebc7ecfa-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DlJhs9jkaoUo3iLnjMHbouiGsa2g1sEL2kLxGpIR1nqXvM%2BdifzP%2BqJUASunZW94AEaXTntXsHmo8uXjwhFt%2B2ceQ2%2BJIkz\"}]}\r\ncf-ray: 9c740cf0be6d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-chaos-crew-2.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-chaos-crew-2.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38104\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:46 GMT\r\netag: W/\"94d8-19baced3750\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwG%2FRhyDFOUkzqhITu9P%2Bwqh6yXkDDpo317nj%2FsZDts%2Bz32MVmC%2B%2BA5Unzlpc79rrFeKBnJ8QOaYSNopxH0ImM8AElklIw0d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf1ce860b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"870a45982975ab726364faf2f1c3c5c4","sha1":"07c112b5aace1ea70c6321404b004a32d5ca1a16","sha256":"6edd919c24df00ce9728b636f8a0b164e93ad310cb6aad56d55053fa6ea3c34a","sha512":"ed9c87c19441323d25b004aa9a3cc9fdc98709d8455fa4b80152a64e99fa2e1d126bdf931e7472cde5a52db1cd816b77d60d711e9ba2ea036568adb6593740a6","ssdeep":"768:FdKCxYkq+fMBeTrpfaSrgXcKEZURdAemTuIsW19G376xjHPbrwE:FdKKY/+fWMrRasgXpmURuPKJWzG376pQ","tlshash":"5e03f207c0b8390e78eabc7d2bc44f155a5e931edd4efa86b9e1b1c8817a41d59088ed","first_seen":"2026-01-31T21:08:57.166938Z","last_seen":"2026-02-13T04:13:07.64927Z","times_seen":37,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/944ac4923c54ffbd.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1121-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erfvTt7WjIuP97gMg8wFj6WvMXtdP1tFy2YasTv0QMhTLu%2F2WGnw7Dq63l%2BnTq%2Bt%2B2PxSYwrUsIuZfCpPK5BbrACLW2Pf01o\"}]}\r\ncf-ray: 9c740cf9af470b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4028)","md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/d46c8391d5bdfe55.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/d46c8391d5bdfe55.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"77ec-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqhdjcA06EocWaOOMBM8exIH12my7NF1fhkupBh2cU53ciVd%2Fnob2VOK2prMzr%2B6GSIK8WvOOVRWyTOO9QnyWoLFXgZ6IadO\"}]}\r\ncf-ray: 9c740ce35d420b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30700,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30341)","md5":"faa78fe4fb496d7d7e8e0291756cc1f3","sha1":"6bcdf2e14f91b5fee8d295edb9851320adfa4a5b","sha256":"ed4ffbc69e75f48ff9d13860973a024f747da39bfc52be9986bf425f80ee53be","sha512":"71425d412f0ab946f12fad31d78cc15dc986bebb3087ef3c8c99a5c4b63dfeb2518c28c878c89596f5f384ec5c4a094c97a3d5214610651a882d45a4d9f1c3a3","ssdeep":"384:Df58F5SF5BqXE0msKkymRd0cJ3ED79Fg/aW8qWtOPSNAatwMs:DB25SHBd0PwMIxCatwMs","tlshash":"9dd2c8b17395f9b352db86d9d03a0015f2290d3530ae28b0b394dcef368dd8991b9fa5","first_seen":"2025-12-31T07:43:06.411892Z","last_seen":"2026-04-28T01:10:54.127528Z","times_seen":185,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/2349889433227e69.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/2349889433227e69.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"10b33-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2Zlh404Hri1Bomle9seQgdzVQO4msNbcpk32Mg1v2HwIwM07DQpgV81AXVdikbn8l5JB3Efqe8BzANX9fLVhAKbjUw%2BV3k8\"}]}\r\ncf-ray: 9c740ce36d4c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60216)","md5":"78bce7ce7acfc3881e181f458e56e281","sha1":"31b0a2cee84238768b19d60f5bbe95073f85f927","sha256":"bb5a1ecce51f1568ea7b8136da53386bf996288fcd864ec646ba176b5b858af0","sha512":"3dcc827162e8eda233878321092245d82f2eb30c1f09cbeaaedc63426ff11efef495f99064aefcb610277b3bfb0266890fe6ebcfa75ea538d8d58f5c55f1f96c","ssdeep":"768:giSpd5w4FuUe/y1xxzgxk93gtaKoYYS221frDQUkP/M6+rueVutcc9m4V:ZYAymxktgtDDQUkP/M6+ueVuZ1V","tlshash":"dc636c63324228f65bdf42c6e02e8606e33915d6900d4124f7aa5c3a5b61fe890e7f2f","first_seen":"2026-01-11T01:55:53.41201Z","last_seen":"2026-02-19T17:02:28.846589Z","times_seen":73,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/c9d86bbb7c4acdee.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/c9d86bbb7c4acdee.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"6599e-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WD7LtWT32Y6%2BmzVnmcH61VMdyCYs3YYC0yh5L5CTFC427IqYSzIfadOekiPbpF5tHGOnKUCis6Vlr10psPKOfeK4OkQl1dOW\"}]}\r\ncf-ray: 9c740ce36d4f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416158,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"375038ec8cec6aada72e25b152bbeef5","sha1":"c78b20a01aa625bdb0e1ab2358db14698586a570","sha256":"606e1f12073f6762a118cf232414bf2899bf3ffd6f7fd06ae61dd2363cd682aa","sha512":"97d64ef9834f0b04009a43f212061a31b40a484389b2959a10b49264597a5c6a9a2af0e7b45d248e3bbce3d70e036cee4a77bf53eaca3c7f7a670ab7d43b1c5e","ssdeep":"3072:ueuxDvbX1azHazaNQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEM:ueuxb7jV2ECNvms+lPnjz6x","tlshash":"2c940888b760b022835666e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf34","first_seen":"2026-01-11T01:55:53.513192Z","last_seen":"2026-02-02T22:33:10.118728Z","times_seen":69,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/8d97a31a2b7bb52b.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/8d97a31a2b7bb52b.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"c2b2-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96ynlVSyZYEF%2BGDKk4xJE3nzVejYHnL7ogMvA7d1N0vAuxMx%2FMY99B4lnpC15tiEQQt9oA8TGRosYiaw6Z62BcNL%2BAudBteE\"}]}\r\ncf-ray: 9c740ce37d5a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49842,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49485)","md5":"7a6782562784798052f56f3f546edd76","sha1":"5ca984010f470a582d3d61937aa02edd1f2895cc","sha256":"eff3ee36a789baceced46592cfdf60b6b5c83bf5d7031b9e7789b45ba2e99314","sha512":"cd75a77848a365e4580e7897c2c9f6ce89280556a892969406e4219da7dac8e1d56ddb9578ed3b04593af3ba8a141294203fcc2a3366261d661ede7ac6ee41f8","ssdeep":"768:0VfQIsNtn3lErrOfQHL099txV8zlutf8uTpfQlTWH228qz9x/:kQXxSrS9LV8s8u9QIl","tlshash":"6e237484b7a5b02947a25191045b544bf278f938a4cc18acf360e4f628baddad4fff74","first_seen":"2026-01-11T01:55:53.523305Z","last_seen":"2026-02-19T17:02:28.656397Z","times_seen":73,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/5b4c38a1263b182c.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/5b4c38a1263b182c.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"14f0-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrFa9mwOJ3Rb5XUAoXUaW0%2FWSQ1dcKxbLbn8DwRie6PsiS1ZaVPni3xFNNGrKLz17u9yGuhAmaySBvWEFJUJYI18ZewtVpK4\"}]}\r\ncf-ray: 9c740ce37d5f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5003)","md5":"f8e9ec1997bd5d30fc21d00e4ead8870","sha1":"204eb1cf4545e0065728e78078f652c93127da73","sha256":"f2ad2659ebf3d8c610e1d765790329fb17c236fc2cce6bd92041802c1f8446fd","sha512":"37dba0ba6cb75187896c36a05d8ba09efc92dbcf9be03b47a1a4840378161d97b3a9fd1928ee668c4794dbda8d37a7dd72e66ded40f9180d5af18d433f199748","ssdeep":"96:GDj0znt1HChTQV4+NBBBKrTukNYx5bLOPtFffaFAbkqiWFTTGD/TMAI:aoz7HCcBQc2VFffaebkqDQw","tlshash":"98b134d4911c42bc985523a8522ad843635d10ff35bb5ea4d9afce60a2c74cce2a74db","first_seen":"2026-01-11T01:55:53.429255Z","last_seen":"2026-02-19T17:02:28.608647Z","times_seen":73,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 548\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%7D\r\ndnt: 1\r\ncf-cache-status: MISS\r\npragma: no-cache\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.86.247\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1z6UDI30JYRJnsKNXFSK8BwDRRHAD%2BO5v239DnBbG4AsVuYSh9IebZuVQPN1M76hWLgjISdCf89MjyCp0EVc2dh9QaW1mza5\"}]}\r\npriority: u=3,i=?0\r\nx-middleware-rewrite: https://eu.i.posthog.com/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-3klUTrvQCrJANduzFCbVjS' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 11\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 20:03:08 GMT\r\ncf-ray: 9c740ce83ddd0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (661)","md5":"18c8e920a48d5bb95921e6187c07df2a","sha1":"fb3dd7bab6f2653b6f4a734c0624ef46ca779d78","sha256":"20333bfd82aee4085ca68fc8768b0b251267ca5b5c93d3fd464c690eeef54b0d","sha512":"0a10abcba25f402288531176bc4ca609daf16ad26b3d678b1de79e37dc449b3a647d29b4efc90e63d2153d273fc1d0cebeae2adc797fdd432ca5751f96cf9601","ssdeep":"","tlshash":"1d11ab1cf9a004ba00e6715c5fdbe1836fbb858792444c2cf5c40550f70ea2b9543fc0","first_seen":"2026-01-31T21:08:57.376306Z","last_seen":"2026-02-02T22:33:10.199626Z","times_seen":67,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/web-vitals.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /ph/static/web-vitals.js?v=1.318.1 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.71.144.70\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXT0RQc3j3ixtsSoxiG6szREtmjDTG5Q%2FOuGvWutx6aMndE%2FaeAl69zH%2FA2W80t9R5B3XwUgPId%2BQjDLXX%2FeKOa0ABbCPPLw\"}]}\r\npriority: u=3,i=?0\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/web-vitals.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:09 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\ncf-ray: 9c740cebde2b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6559)","md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-05-30T16:55:13.565573Z","times_seen":3485,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-wanted-dead-or-a-wild.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-wanted-dead-or-a-wild.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51918\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"cace-19baced4ad8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qI4%2FmqX9Hc4UEwqrECYfYEBqij4Mgcv5%2Femo48i0xwlk97EoxahyDqrKcqF%2FZenG1gVKiYfTFxNX%2BY6E4IfD7iCj1%2FGXGT4C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf17e7c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"63a0d4171069632fef4dbbc0ff5289c9","sha1":"c914721b8acfa20a31137c3dc042a9b0f6579b61","sha256":"7de0d201ea99245278eb2efb45734adbc1f58de180e1ffdfb23932907f966338","sha512":"e4c8a56c4037cfe18439a8140a60ca088c4823c73b4f64d2449afeb0d0a1543afd2f721030a0fd0f75dc01cd0724dc210e5f5df0ca280ea44e5d3112cb673f39","ssdeep":"1536:BII1vIJI7viIfINcU3LnEpVn/wyOn7CLa0vOC:BI+vupW03opVnoX2aId","tlshash":"2233f221b51122a1ce720cd196d3c57adfbd215ce870f7a2eea48a6448d58297b3a14a","first_seen":"2026-01-31T21:08:57.273279Z","last_seen":"2026-02-13T04:13:07.577758Z","times_seen":36,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/5664bd740cac6a96.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/5664bd740cac6a96.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"12cd-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5McJSQez61gaozQ0X5Qg8yHoX8clp7M1AJIzxoBuu4tltWX7gN%2F%2Fnz34wOePlOtyNjzj00lirwDOAwcuY0fp8Y2Grnm02qr\"}]}\r\ncf-ray: 9c740ce35d430b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4813,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4456)","md5":"838e5b67c708c3caa4ccae2ab6eccfcd","sha1":"b2666226e6fb839315d216fb69074265386b6b8a","sha256":"3afd0a23cf42518fdca2dfc42bffe1b2c611189b89799ecbae2386434adc8e3f","sha512":"845acf9755edd329f45184ad9bccde9249a2018ea514934ae462a84992c69b4db39d636b842de7d5c71b9187c3e2fedab2b41095dadbbfeb40a683b3f9d8c76a","ssdeep":"96:p7ctuv2BtSDxfARZ0kqJFv2H43uuqoE91YTkqdYqiEAXjv2YM:oBtDRCkqJFezuwgYjlXK/","tlshash":"d0a1b6b231a0f490d16b4294c03b441eb27a2d3e609d71b493bd8cfd67e544de6a2f97","first_seen":"2026-01-31T21:08:57.248038Z","last_seen":"2026-04-28T01:10:54.184543Z","times_seen":182,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/def7cbf195df9f5a.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/def7cbf195df9f5a.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"81f6-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEYY2q9mNAQ2Xq9tyTwh3WZjdWJdzZQuAWJa4uI3eSY5nC8zyanvyyFPnUh7Hp%2FXVItwne5Gcex3tcF6hYdvt%2By4yik4i4TZ\"}]}\r\ncf-ray: 9c740ce35d4a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33270,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32913)","md5":"971912a88b8fc321b1e02c9bfdb119c8","sha1":"13a51b0bd9f9f2c32118f3d9316f40f973a5323a","sha256":"7514ca2d94bdf7565bf10f198d551a4a1b715765d20f7587aeb1591b808686c9","sha512":"bc0517c20439d8656f1c01310675031fcbc20e9b2d1ded2ab2462d47e47342d72502c75d35953d2b1079a3519a71e73ff18197b7b367a85769c427b44198fa63","ssdeep":"768:a4HG0/x/V2i4d9Im/22FljzYvX9ia9Qsm9:7mox/V2zdWm/22P3YvX9ia9Qsm9","tlshash":"8ee2d8997241b2677ae28196d83f0116f2242926140d803c76a9bcf77863dcff57be36","first_seen":"2026-01-31T21:08:57.211453Z","last_seen":"2026-02-19T17:02:28.670347Z","times_seen":71,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/82dd7d6267e09cb8.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/82dd7d6267e09cb8.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"bdca-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGTV1riZIXcKckp5JMYHFTje6eSK7HyGLiLZvM9lOarga3fXOCvTlpYXdkr5Ch4gtqsHPkkIZLJ4xbxloinMFN4njUQHVhrb\"}]}\r\ncf-ray: 9c740ce36d530b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48586,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48223)","md5":"f8c4246d22a1a06a7f417da630df5915","sha1":"9df9c9183bc1b5f82cd24ea69b7e25a5af00f7de","sha256":"853c2c482fcd17d31f8ed4788c289e260c3da301ce12fc9bf6ba190e61e512fe","sha512":"e5b56350b103b601538c2762ecb1a05102c648b66436ccf600010f6a699bbcce8ba8498a84c30a9f3cacd1637c21100d92e574d9d960c8e040936eee9261924c","ssdeep":"768:HT3NPN5/4OYWH7pyZpRATNxU2nwSre084SlFO1V+mtmlCg3v9aCjUeVhWqMDPSRn:z3NPN5/4OYQkz2To2nwSrex8jm3v9aCv","tlshash":"3023c660b14171762a4343e4442e03096f3e79b4678c546bb7ac9de71e62cca4a7ffb2","first_seen":"2026-01-31T21:08:57.230118Z","last_seen":"2026-02-19T17:02:28.742744Z","times_seen":71,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/flags/US.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1728\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:56:37 GMT\r\netag: W/\"6c0-19b7b591f88\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ruIqVu7rYkKjOAlMrENbkJh9SLKk6HNeOiIv7N7tGQ9aPJgg9Wx8NbYgqQ1EE%2BZQxt8X1Q2Y%2Bs9YfzBd%2FGh3qA3dznIquKYl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cea9e160b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-06-04T16:54:35.374525Z","times_seen":82,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-ze-zeus.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-ze-zeus.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22890\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:00 GMT\r\netag: W/\"596a-19baced6e00\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGNjJAG3T%2BD0wsghzkoL5lRYMVz4oeG6k8nkvSDSWddpD5hVcsK5bK8XIZuME52Mfn2PTlUPEJrejFx633ZmPMPhAc9T9Z%2F%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf16e7a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"046ca2674f8bb523fa67d5cba9448ff6","sha1":"b3ff82825c0043e287accb4ee1c7334508b1afc0","sha256":"fa288bd44bc3489a719862206acb1359db6e4c47410cc4b78fe3697f9f6f3b42","sha512":"da5c70d220c27b3ac669c32b6545b5be45bef5a3f5b6f453b9db88264896ffdcea58d193097eb6255e06658a656c7d2c8356e68a6e5db5d229d985dd55153488","ssdeep":"384:HY4K44kaqAoBscCWy8gF9XS/6Ol78ZAEfFOoBUdq6sOxcp6W4mlR2Th9wBYwyocB:4hsF6KybzXSyOsdfFOoBUdqaxcpDR2TK","tlshash":"b7a2e171367b923adebd87ec18073b451ad095b7cb8095488efabfbdb224421111787b","first_seen":"2026-01-31T21:08:57.2815Z","last_seen":"2026-02-13T04:13:07.575007Z","times_seen":37,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-le-bandit.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-le-bandit.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23916\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"5d6c-19baced4ad8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVcOGLsw7Qjeg2%2BBp7y5SeVcPq1SDgLZ9ZdKmP6x0jhOBv03wwWTqRvnJbOv%2BOb0flrUUELCxmJgrlTKcxSEJLRTPikvidHy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf18e800b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9de08f32964f5aee1456aba9222b1d8","sha1":"58208e1a34cf4b1c1d07e8ec16c5b2d087c6ef7a","sha256":"6feab35cf836410fc5d28e3f897dfb328ed561f2d5ca3f001f899228fe770e27","sha512":"f594fb83db37b86d62bce0c92744af5d15420e4ee6fa6798ca47434de699ccb75f1d241d495e7e500e57d56f3b2ac07421a588360823ea68d34db1040c4a5a90","ssdeep":"384:zjtb3N3JGosKlKwqI0Tf0sohTqWigKI7sz1rXPITx9DkYUAgLnyfgTQh:V5hsiKwu0sAiZ7wd9Dk/AC5Qh","tlshash":"2eb2f1067367179ad56df33cc902636ad3481adf336d8f09c4b06f06b8964b2882ef16","first_seen":"2026-01-31T21:08:57.365677Z","last_seen":"2026-02-13T04:13:07.630263Z","times_seen":36,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=z9k60","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=z9k60 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b9e0f531033bca6b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=z9k60\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ExDBCqbCJnt7L7F1cJxkiK8BqwJASs2BmoiVcQk93QgvoSZUYXEYgWsFR70NmIeyrbOTE8tknNaQ3ylUiefVIh%2Fg49BWyJZ\"}]}\r\ncf-ray: 9c740cf44ebd0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3117,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2729)","md5":"a564b9144bbe60d7f399e52d4af65935","sha1":"312ce13adf9705eb2cb90650831cb2d50c59b04e","sha256":"4116a5f9b9ceecfc63f187e3b49f9f54b0339d3d98de9cdaf449139e6204f5bf","sha512":"1a8ebcde28255287c33c80612e3ab7ebc03497de9b7d4d63b8fbe6f1126840b96f66078e37072eeb0be1b0a6dd8cba95f8324fe7507c603ac13c1a0eee631b1e","ssdeep":"","tlshash":"2751327d120aff6c6b6b0548545dc329676e4a3af7738e76e2fc4972034a0349b832c4","first_seen":"2026-02-01T20:03:45.096501Z","last_seen":"2026-02-02T23:30:02.789459Z","times_seen":36,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/platinum4.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/platinum4.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7034\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:45 GMT\r\netag: W/\"1b7a-1930f246a28\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xaTwcZ4AuLo6GOYXvIGAEMWeYkE%2BlZRGRSXPkGBALY5eppQ8Py3fxcFpsYu7ZOWIuEMxQ1BayfOO7AbiDP8MxQJm1YL6ZTg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fedd0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e0bc3fc285e85b799724522028cfb8a","sha1":"8386e640d367cecdac67b4737ede83f6475e7407","sha256":"a9287616ece0dfbb915845b2ff11fe7c2e6d97430e239a83b05fa95c2adc241e","sha512":"de7c205388caf17e287f63f2fb735c3a85600bbe32bf8750c6c665979720d2bb05007fb8b51319f8ff4c5afc83e3449a3a519208974b36f993f63faccdcc73da","ssdeep":"96:cQoru9pqWfpPBT1o7VarDNy6Vis49Pwp0oo+M3oyOK7WHji5/PPgAc+DyeaTGJci:/WH47o7VIYsQPwp02MGK9vj3haGmov","tlshash":"d9e1cf3f659474dad9f10bd978e7e4670e8895b72d58360320e7faa3540e38f883009e","first_seen":"2026-01-11T01:55:53.516394Z","last_seen":"2026-02-13T04:13:07.558506Z","times_seen":32,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/fc3bd7c39247c848.css","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/fc3bd7c39247c848.css HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"53027-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7fgjBIetWhMKIg0XEXwoUGQwqk%2BdvQkxVMlDnIUxtSnGQuvuSXrQC1wqYTE0d1hQlA2OwxOSmdfsBXgU7UheBtjck5M9IiF\"}]}\r\ncf-ray: 9c740ce34d340b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340007,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57b3a1fc42725b3767655e2c5e1e3686","sha1":"a5f033187d6d8942dabbeb5c7bb6f7e01abc19a5","sha256":"7220b9aafafef2c5593b891b67bd48a5bafd4f4b4729eb23d098f09255d4cfc5","sha512":"e0be6e1bf967112ca7db7ace4fe5d08e7038ccdb10f0b80fe07906ced9f3458b28e8eb46f3eb9b9f8a4ca42258c0dd9091181b121122f6d0ef23c066f41c6790","ssdeep":"6144:ssaDL+pazxc/6x3jchVC8cxIwBolW+CER1NGdROr1WJWVgSBL/SZG51Ro5kJfb1L:rvRl95T","tlshash":"2974a391b119d1bb7e2ba4fda38cf8dcc108f082de764ba9f955922423d37f36961604","first_seen":"2026-01-31T21:08:57.268767Z","last_seen":"2026-02-02T23:30:02.779633Z","times_seen":75,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/turbopack-6ee26e047f7ee00d.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-6ee26e047f7ee00d.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:02 GMT\r\netag: W/\"29b8-19c1abcba30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEDKQkRuKTFvlXZya2YdQ3CGToGdzK0ExJa8oPXANY%2BY%2BOa8V%2FYb39n0WCIs9BQhlaPG6eheB8qEXK1a1anCyJ8rplmOmv%2BA\"}]}\r\ncf-ray: 9c740ce35d3e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6484)","md5":"b6b5b2e80a23c95aa5190c9fa05e7355","sha1":"876299aaa2a3feb741115dd1962580e7c343e905","sha256":"749012b61c5905067dbcdcfd75aaff565a61888df8f23319a9c2a249383b5aa9","sha512":"bdab1b321b5b551c66f7bc68b1264b62dcdf4ec75f066934487edc32c99aaa66ff2941603a2515a089f8c60becdf493ac753db8d7e46a500e063f6454169f2e7","ssdeep":"192:lspVl08YEsUnUj5E4dn2Npl/daXMh6lW9xocxkUk1MsI:lspVv40bl/A1UroQl","tlshash":"3b22c6da33b6f073436fa5e6807f0040f17944b9145d542893aca8fa38794ae46e7f67","first_seen":"2026-02-01T20:03:45.099931Z","last_seen":"2026-02-07T15:13:58.763248Z","times_seen":37,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/ce91559d705a6f80.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/ce91559d705a6f80.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"c28-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R14NUWY1Aj2Y6VTz9CkaSY393d4Jzdi5ZV9ZjpKlnzqJK5OvQG2Hswja3Yf9wYbjWNuvGcg26R2CkkUv5Ud2UTXFKisafqMz\"}]}\r\ncf-ray: 9c740ce37d5d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2755)","md5":"ffca57ca28216716952658164becacfb","sha1":"558ae2e920765a2076592b4b168b3d4ddf339d5a","sha256":"bb1d593df6a0ee012c5e177fbff4f96e75910044292eb6e9d451a35eb38c2c2e","sha512":"c7bfd7c23d31e691b37e6158532f112b8c8a7cd587476f7330b4d41c6aa9e8113d2cfc819c8a4fe883caff42d186b029ed92e0f03ab20c04ca3024852228bc1b","ssdeep":"","tlshash":"2051acc21a4803bda9c691747215751393ae21bf75dfb4e4cb2d14b8c293888eb734db","first_seen":"2026-01-11T01:55:53.524258Z","last_seen":"2026-02-19T17:02:28.647973Z","times_seen":73,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/6ad96a8ea39e5f61.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/6ad96a8ea39e5f61.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"8013-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5r9g66sepAqSJURrd%2BkZYBlehIUVGntI%2B5SYPJoPkW4HbRwqj3Zkk%2B%2FAEcGryuapLeixC61htGmP6uU4WGPJYa2wX77YazPY\"}]}\r\ncf-ray: 9c740ce38d690b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32787,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32430)","md5":"58590522cdb7953a32a5e0ffbcc8cd6d","sha1":"ff06e9fc51e2f9be9ae55c9cc2bb9e6901283967","sha256":"bbd0a5562d046864a232012dda15a366777f9b6677b07ac7b208804f74e0324b","sha512":"4e59fefa47581048a046ce15f05cd9820f7818d5cfd0b2fabb7544ce6908ef662091769794ad31eefa189e042f99fec03a86f31eccb8e8a50e40e9f4135efaa9","ssdeep":"768:GKuzc3PXS6w5ZLpJz9tEK+nmKaSIrstfh+kG:9cc3PXSLZLp9x","tlshash":"dee2c66050557abcf56704e8b66ec40cb11e6e68cb0fcf18b5bc7c2a385a8816d96fd3","first_seen":"2026-01-31T21:08:57.328326Z","last_seen":"2026-02-19T17:02:28.658552Z","times_seen":71,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/gold1.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/gold1.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4380\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:18 GMT\r\netag: W/\"111c-1930f2400b0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyjf2k0imb3Le1bCtWHqq1KaI1m2KbrAPUMEdTVwDpXu%2B%2B5GFT5R7hGEu0HWNVVhwaXmdUdUpdY3d3%2FKU56hreREh9Esh%2FRy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60ee50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4380,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4871a0b3d8917103a4065168871efb6c","sha1":"24979179b5552f93960f58bdf2424126cf9264e9","sha256":"99ead3aaa178bb7a6a47fa72360d63eeef7e6c696ada3723c46eb037af123cd0","sha512":"99942d13d1d4bf95aba55f11b993180c8e0524a4e4542ab22a2908b081374686bf64168b425cf250024e941d6153066564de6a3e95fe08533bb16594fb36cc99","ssdeep":"96:h6xb8++AODzmab0uDAdundO09zFsgeoQHFzE+4Lpls/:4xb8++JDzrb5LdOaFJe/Ovpls/","tlshash":"57917d259ce887d965dc09c9fb4af177269269ddcb27274dcea0b913412a002c3ad6e2","first_seen":"2026-01-11T01:55:53.57397Z","last_seen":"2026-02-19T17:02:28.746334Z","times_seen":34,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=ufh8h","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=ufh8h HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bed5623c153f2076-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=ufh8h\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7HKZpLozYx%2F5mLVqKqCYwLU18ONhA%2F%2BhEAZ3F9%2B6f40u1%2BlH1c%2FW1q7tiDnXJIQ34%2BZZi1mjhq9WU3ec2l%2FU%2Fx9SkNdfZ8g\"}]}\r\ncf-ray: 9c740cf63eef0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52740,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4865)","md5":"9a20199c96a353d9a5060c41827f98ec","sha1":"730c225d1efffb092c7a9c9903069b0c6efb059f","sha256":"8b83c3381a7875fb93412917d45d3da9392e1d048abcd2a74e69ea426e286b7c","sha512":"e90eaebe851ba1f5565d6d29dc54f2e5fc845b409ad92e492d51091503ed20a03f986a0cb49967f043b6660e8afd022dd5b9ec0c89ccd4d5f72eca68a72b6183","ssdeep":"1536:tEbG4yk48Bhc5+4FNyRjx4OQpKLnlxkN0a3BFug:tEb7yB8Hc5DFQN4Xd","tlshash":"e633d765a71aedbcfc1aacad140f8335ba8909b7de22ccb9d3ec9d4403490345f592d6","first_seen":"2026-02-01T20:03:45.103913Z","last_seen":"2026-02-01T20:03:45.103913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/vip?_rsc=8x67e","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /vip?_rsc=8x67e HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-806bb8efb05700f1-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/vip?_rsc=8x67e\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTBixkRuoZqrccjFX%2BSxfgCts%2FVQ7E11SAqCzxjN8kB3PmhVHhqeeTm4I9qUZaXh82XpXcJzKVryz9FwUa17kSTXp0wyGAFU\"}]}\r\ncf-ray: 9c740cfa6f5e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"659e4-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irSDNgqyTmuTlVM0nti%2FM4%2BkDGPR0VeYbeVUaCV%2Fu1CSrBiUipwDpc%2BI7zNct6FcjJnPmah%2BdB0zbfpoNu7xQ9ODSqeUaVp4\"}]}\r\ncf-ray: 9c740ce33d2c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416228,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter ExtraBoldRegular4.000;git-a52131595;RSMS;Inter-Ext","md5":"5061bd7701b1b3339f0c80e69a2136e4","sha1":"4a028f1fa4dbd6b4bfbfeec4a5b5e222a005b563","sha256":"3c13487b8f2eba0a78cad4cefd19272b0f4e53d61c223e6b266ddf0b332e9f1c","sha512":"65875f9f205cd70d2e1b86fbda2ac8875637e0b3e0bb37ade9da20717b0f17d2108a0cf2aa1b246affd73bea233b510d37d13193801d94e5148d3ec4159653dc","ssdeep":"6144:3VpTx/VCC2wfBsJWPziKSQVE58IqsfnHGR4tGX5/2nHTAl84RSnj3k4yhT18:3Vp+C2wfBDPziK+4suO49lfR98","tlshash":"38946b23e706db0ecd1a1d3486f5cbd037babca1792ad24bb0593a19cc931f41aa71d5","first_seen":"2025-03-15T18:38:34.528748Z","last_seen":"2026-06-04T16:54:27.195261Z","times_seen":211,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/27b71be17762de0f.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/27b71be17762de0f.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"8205-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zjeOhw9wH%2FJjVAjbBbaV7jnKMthgVZc9J1%2BkbFn2uBMe18RJV5Tc2lpkyFOtYTa5HJ%2BP3Ai0mGKy%2FbDIZI15c680pq9CGnb\"}]}\r\ncf-ray: 9c740ce34d390b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33285,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19160)","md5":"4096c4d4d5ac98daec5aa8644d190e15","sha1":"eda20aa13991a67cfa896c2cb095ff2cc3eeb066","sha256":"a4e704b26094e68db8a6c959285508c57e758610aa915c4c8c38bf9f71801e62","sha512":"20bc9534196dd3654f1e511b2f8762774d5621779a3f51c4251e567ac2c2cef57ba58e1c7e9d2ef5c54b9babb5199ee2c0a475d1908a5869ab905bbf98ec0a13","ssdeep":"384:ojpSDGGRkRSrTfIVZ/X+C90mkdG4+Z47aYSwTgqGFJp:2S/8Z/X+C90fMzZ47a8sF","tlshash":"dde2b6b572d4faa2129341f0c43f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","first_seen":"2026-01-11T01:55:53.408677Z","last_seen":"2026-04-28T01:10:54.33573Z","times_seen":184,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/75ff833e87438807.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/75ff833e87438807.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"25f4-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3Zbs0DFFZ%2BG9ZpZ1CrhXu87rtb60xflOw2v2YjhLtsxOFUIMAw2o2hhcEIle%2F%2BH1IwStsTtiIDfm%2B5xAfQyaMe9RnZTxZaj\"}]}\r\ncf-ray: 9c740ce37d5b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9716,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9359)","md5":"59109722d30768ce9fba15afdeeca226","sha1":"a26518ebc95101c364cc8a9ff07f5d0f9e6e2a38","sha256":"c08ded8f72c595eae08a2471266cc35e1e9a8a0ea67a8f7faa4a19a6af15d662","sha512":"f85734e896da6467182958b85d3520c89137ec0a619145f5463e8227e018038412bcee216ff1cda9b2600155a91aa26dd5c2a868e0d4ad9578d7e7c5c061329b","ssdeep":"192:Qw1Z0+ej0y+9HYgN7V98SLnm4tpQrWASL:QmZ0+ej0ymT/8STm+Gy","tlshash":"a7123124e2bc513d689502e495274023279e817f738b517ac99ecab0b68787cd793cea","first_seen":"2026-01-31T21:08:57.270105Z","last_seen":"2026-02-19T17:02:28.738687Z","times_seen":94,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"63610-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0bK76MB%2F6jp%2Bsi9BWRTBSzLGVDwdDQElmVxxdBfSn4vjwFks%2F3LSCyPhtpN5IJ%2BRZY0yPWPNDN7XYnbp%2BbAcejmct1CirMA\"}]}\r\ncf-ray: 9c740ce7edc80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-06-06T12:06:51.421931Z","times_seen":438,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=64fpmjf6\u0026sid=M3V4PdblLxFCL-iNABPz","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /api/socket.io/?EIO=4\u0026transport=polling\u0026t=64fpmjf6\u0026sid=M3V4PdblLxFCL-iNABPz HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nContent-type: text/plain;charset=UTF-8\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bb6c60dce3330264-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nContent-Length: 2\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oz1nJvqsi8TaInb%2BuGaHvPoZ6eWI4i3J2Q9G5Oh7%2BdTh8ln7j7Zz%2B14KGox4YYcaLLJqvrx0AnnOZ0u%2FMrqdT4Zfw%2FS1fASe\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://vuxwin.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cea9e170b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-08T13:33:15.700611Z","times_seen":423507,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?type=lobby\u0026_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?type=lobby\u0026_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a39a7228c03dcc4e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=lobby\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?type=lobby\u0026_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJjDiRDXU%2BMj3wnclmTfqCHi9SSJlorcFCd9MEA4WYETV03PCUAZ8hNqJHF8sc7ISTPMjc%2F%2FqhrT%2BTrkbL%2FfqRZWZawMm%2Frj\"}]}\r\ncf-ray: 9c740cf0ae690b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (821)","md5":"bbc959ec3ac9c9e34bb62de007e926a3","sha1":"038451702814919789945137b023d718d7befeca","sha256":"d4c08b840fcaaead99b209b036297cb25ecae41d74e266d7740641be8a3b25ec","sha512":"c211a13769e8f75b0e84fc0610a4de8129cb28c5286df3f295efdc52248701ceda68804dcd2e8e6628502f839d3a848f006e4698b5635f94ebb0dd9b6282b67a","ssdeep":"","tlshash":"d8417c0dc8499db498c9d59a71d9d7016598bf37f1b88da8e04bdca4428b03d0beab87","first_seen":"2026-02-01T20:03:45.036147Z","last_seen":"2026-02-01T20:03:45.036147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-the-bowery-boys.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-the-bowery-boys.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36342\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"8df6-19baced5a78\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAtRgOUvJ4DGavqSz25qsmXG56uTR694oijr1e7JgfVusxhb7wgt8cmFMVvUTpXGhi9YrpRbTYZzG3bK44%2F4aR1zFU%2BsWaNS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf42eb40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5503164d939cfb0b92e51bf0c57b4a8","sha1":"21416a7af812476851e6ce13a6aeba17c09ab8e2","sha256":"5c8cbaa580c3e8cb4f32b273026cc48a56545ca808beb5e28144a344ef87e4f3","sha512":"9459e28e0e1e0123e3ef3f3a741e15c6ec50f89d8ddfc05eb7499c0f4f65c532e14c7039b609d2133cf2b8b92b441a1c87c48c9f50201378fa7144f350e4a907","ssdeep":"768:Hbz407zDs+/6tKpbYnVLCHUJTQaVCd3oXQUE7UolAMoJhgNAAb:g07it6b8LRJpFQUEpXoJhgNAAb","tlshash":"16f2e0210361dc96dc4834b888edf476eb770f951884220afedc9a5a8ff6063cd82887","first_seen":"2026-01-31T21:08:57.171092Z","last_seen":"2026-02-13T04:13:07.638337Z","times_seen":37,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-bigger-bass-splash.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-bigger-bass-splash.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37058\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:52 GMT\r\netag: W/\"90c2-19baced4ec0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDZI0oAZCE2iMv1ypYJiU1kMWRGN2jJyjVuJvLxLRTD50v6dszOMYE0oRrYRb2m1YmXTlQXQlIEGo7KpfkXjAKQunn8JRlJP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60ee70b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c5049e56a4feddbac2787225b903725","sha1":"3a0b1ddb22c69211e4f5b11ec97a925681062f9c","sha256":"6e1dcc85a88f9ca60588722f2746b511e192d1c2c2d358738620a52e6242bf0e","sha512":"6b29629021ec24a7ba7b24370926173c562792b25707f7f15955dc74b51daa6184a3b9e4ce1889ecd53d785670bd2d6e2ec99e29eecb74224002be6092a43241","ssdeep":"768:7RjJg6OxPolHb5sa0BwjIdqULZX0d/o6k9jla+Mh9o81z0RuE:9dg6OKlea0ajuZLedg6W89o81QRf","tlshash":"76f21233ee01a9767d0892720d94d691c3dd8c8172eff2523d07d9880e1dfe70e215a1","first_seen":"2026-02-01T20:03:45.109247Z","last_seen":"2026-02-02T11:55:56.796778Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc20-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ft4YYBHsCi%2BpIjnuRr%2BwEggc7z6lpxa%2BDkoJ6l4FxRAytE3VbXX8r4FBgQVgRSm5ip66gTlBVnwW5lB9ZDwIDY6daOm8P7Gg\"}]}\r\ncf-ray: 9c740ce33d290b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56352,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"0305ad7453af42d8f036dd29294ae5c3","sha1":"ac9a042a40e49e8cdbfe0e64e84d9b1c5724e98d","sha256":"7a73e6aa8107e0046eae5dd713bf4752d93e689f57d51c45b1545acddfd71be3","sha512":"d5a1bc2041edc0debccd45637460ac89ac3234859029b8507072d6232bf0f0e9229864ce51ea3b43eacfdbb029228242bfdca046ef86db05a1ab278ddeca209b","ssdeep":"768:VJRyPX2U7ifzsuaBqydjkUP057fhrrXtk1ay8zENP4EgzwtCE:DRyf57eQFdjkS0HC1aSAbwtR","tlshash":"60434b16f716871ee2936eb9c673d3a4e7b5bd30be23434b64755b2ade0b0e44c21284","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-06-07T05:52:39.100905Z","times_seen":762,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/op1.js?v=1.1.3","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /op1.js?v=1.1.3 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 13 Jan 2026 19:35:43 GMT\r\netag: W/\"1712-19bb8db5f00\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPsSgarHyj6BU4DmwZGCwqvRSBv%2BkzfQKD979Gsn7jCekmD1qnHKwyIATNfwTFXifSnUBD%2BdlGXw%2BhXsJbwz5aHWTDbzwmcT\"}]}\r\ncf-ray: 9c740ce38d6d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-06-04T16:54:35.410859Z","times_seen":235,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/reviews?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /reviews?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9f407c1602543d77-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54WgjHIgw4nD%2BpPNLMppcGn4ZS4CUAA4l83EStvWn0ewoNq%2BGm56iXFRv40Zg%2BjFqOerJqZKvcDe5I4vKTb9lT%2B57t5Omjbd\"}]}\r\ncf-ray: 9c740cea7e110b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (947)","md5":"15de2fd013e1affb0a05560b2a4355af","sha1":"e50e687164757232a9842e33aba45f77ff483172","sha256":"3c6e18ff5b833e199919ecbb1ec17539d8d877f88dfb14f4de9a347a2c13f3b6","sha512":"98a7daed912acace2a88349a466a44d6ce183113e179a18fe926297dddeda89d902c7bed6e00ef05d928fdc777e71ded48b767d30bc1fe95d41b7229bcb7d416","ssdeep":"","tlshash":"96519e0dc8499db498c9d59961d5d7016598bf37f1b88ca8e04bdc64128f03d0beab87","first_seen":"2026-02-01T20:03:45.112145Z","last_seen":"2026-02-01T20:03:45.112145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/dice.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/dice.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2390\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:14 GMT\r\netag: W/\"956-19b7abef6b0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOKve1aIT5BFyTCnAVNlyGjYDoEarPQ03VnDztPuUubE1I4YNqYdH2xpjtkkfbcD0NBeZAkzcO6Xi02UqkkhnugofGcwwSOU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf14e750b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4321a3197f1ab9457ef1edc8cb638de2","sha1":"b1eccd479b3023229103fe120e8527ddc765bb7d","sha256":"26b05e23fbd6963544e3f01f738a630cb4deb0aa7bf94462805c3d95a22d95d2","sha512":"fbf76854f7d7af55aff499175825cb1cecefcbacea89da3e7dd6556e850dd7a9486a006857293641db3eeeabe5ee5102e98130fe3f16a9f62484e4c3d90e0cf1","ssdeep":"","tlshash":"53416d04d1a1d7a450eab19c4229de634ec7d491f54463403f8fbebcc92154210eeede","first_seen":"2026-01-11T01:55:53.45306Z","last_seen":"2026-02-19T17:02:28.672387Z","times_seen":73,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/bets/lastWinsNew?filter=all\u0026limit=10","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=all\u0026limit=10 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b0b35f9228fd02f4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iE5kX%2BrBvlY3Bed9Es5QJusdV3i9dxQe7PCu%2FHkSiNKIaIsxj4jAd8jdu5Bcu0kplQapROWXu2X8VB5qq2HVR0BwKjzYLcAt\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"9ba-ouq6k4+EW9leOWjXWg8rmM1Js0g\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cf21e8a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"71af281273cbdd74f9749121be2fcef0","sha1":"a2eaba938f845bd95e3968d75a0f2b98cd49b348","sha256":"249b92380fc154b6530c15e96b7e14c6014309b1758ea9a9d43cf162b44cb94f","sha512":"490964084cf63b3de4ed9f628b3ee7bbfd4c9c9646ebd5edcc1fd6d895659ca22df4ddf55d2171838573e76ccf8184c739e32c6759beb4485dd4d4e509ab4beb","ssdeep":"","tlshash":"d951be3924f81ce8900d1ac5a1c73a25e4ee651724c8de508b6ccf3d97e8d59ec069fb","first_seen":"2026-02-01T20:03:45.114745Z","last_seen":"2026-02-01T20:03:45.114745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/account?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /account?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-aea22865a0023d12-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 Temporary Redirect\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: /?action=register\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODGRUzrZaw2FC9xhcfwLt6Cdl7ZBoSP3OKgh3ynKiQC96jIa81GkbibpTss9CEi3Zb8u0ANseZxuVzZ4fjMOKK0tlLiUr8h1\"}]}\r\ncf-ray: 9c740cf44ebb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"text/x-component","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-big-bass-bonanza-3-reeler.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-big-bass-bonanza-3-reeler.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33504\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:11 GMT\r\netag: W/\"82e0-19baced98f8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDShVoAufblBFo3bvVUnETFt%2BYHLIU33zdJRsgsqffcSojIIrCODurufUaR9I3bRPnUEtWjedeVAx1O%2FsFQuu7Ei3RGxcX2P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60ee80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f1ce0ff9b9bcad0131c7553f22dc97d","sha1":"27ad25b93e722a31b8e2fc6e82806bf2148129fe","sha256":"1a187412ed5eb4d1cfc15114b4161345f2a339261dd553c3c78ec54b31c43921","sha512":"9fdc76486e5147367fd2eff180459fcb8d567dbe99747fcca349f5d54b6e17553f3bfe04401b13af40dbff9cec9bbaf252c76ddcfcf08623b235e82b7793153b","ssdeep":"768:HnLM2XoDLIMWGwpv2uZ7qTC0jGAPBlbi96p+dtK+g:HnLh4DLIjGwdZ7evG4BlUY+dtK+g","tlshash":"59e2f1749a4ea088e467008fcb634d16d05d32b1f2e6887d5f11f92956c7d0077bde8a","first_seen":"2026-02-01T20:03:45.117097Z","last_seen":"2026-02-02T16:52:13.609486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/blog?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /blog?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a1f6b039e34e3fab-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/blog?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ixx2voPui0Ng7fi7YqvpIT8HUVZmirTWX6FsKIyQ4yTm%2BxEBwh06DBeiX5cnXMbQl47bGo6W9al71mCWIRBDqLVrhgMzSGV\"}]}\r\ncf-ray: 9c740cf8ef310b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/96f87de005b2d6ad.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/96f87de005b2d6ad.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"e13b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeotqaVDlx50VRaYbiunlwPhG%2Fg0Oc5ZLBnWawsDVzI1XjX%2BEOHmVHa3sTRbn2wANp1dWqmSH8oXOBnjPQAAMDf1D3rrRBwG\"}]}\r\ncf-ray: 9c740ce36d540b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57659,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57302)","md5":"17eee88a9831d2853d077fe62f93ae7c","sha1":"b04fa48c468a9688c66373657e1465eaa00e7a80","sha256":"8846cbd91af5225faad20ca5ed7991bb165ad456444ba4e344461fdcba871828","sha512":"755666295f002303e0f46c2628e8f68d3de5cede59b52ab09ac12fa7b8813e130e25d90e2bd07e8a23225bcbc995b428e5631e665dcf67dd84649e4f1d6fafa8","ssdeep":"768:bVoeIOqOdU7FKN/HtE228zbG0Muf8cAyHHyhXmlgXR9DmKcxEeZD:bVo3ObU5W/NEH0MJyHShXmlCDtLeZD","tlshash":"75431999b111b87685df92eea05b14ad733daa0cc10dc118b97f9cad232c5e4b153f2e","first_seen":"2026-01-31T21:08:57.382489Z","last_seen":"2026-02-19T17:02:28.740655Z","times_seen":71,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=nyuvt","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=nyuvt HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-80f7392100d4c4b5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=nyuvt\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nw6c5H4ogY2EZsEVZRLSPfSt0XBJ7RWUPCMzZTqWoUnOLs4n4hy6tUJYPLzzOnItbIy9FCUKivY%2BsDQbzmXxAJvhfXgt5xNh\"}]}\r\ncf-ray: 9c740cf63ef00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2697,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1794)","md5":"43a7a47da0ca304977cea2e452227405","sha1":"c2d3f81c0cd185da913c2dbc64b33a09f445da40","sha256":"29432847d38aae6f49798680afa39546dc793e25189397fcce37674aa66aacf5","sha512":"ca31b10e95a2871963e18f9a84bdedf516ed53b340ebeba352264dceaf2a293400f8bf00677069f0f146fddeeeee435b550743162c507266cabe89141b080f5a","ssdeep":"","tlshash":"6951959bdc1efc984c22dc6c292f6b7681c59973cd348c9ceb9eecac04481271b981e1","first_seen":"2026-02-01T20:03:45.11939Z","last_seen":"2026-02-02T22:33:10.202893Z","times_seen":34,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/8a9983e0eefa6ffd.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/8a9983e0eefa6ffd.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"723b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lp5cq6fTDNEuJQjv2n%2F7bucXFeGfxMHLQsTYX4ePFW98%2ByqJM%2BgO9cAD9pS5k2G8yvPF05mMSBLchhZMIlQYVBnKe8ErEJXN\"}]}\r\ncf-ray: 9c740cfe1f870b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29243,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28885)","md5":"1e2778cdf6269909553d3706405b77a3","sha1":"aa1028f797111fbd2ac1fe8befbc5fc3ced497dd","sha256":"e05ee3375ac81e36ce934885bd42fd26f7873892d52da992947b6ca7ca198772","sha512":"8343355873776a7f3aa490a93a9d79e43be7527396f977f53e07ec8552e29b4fefd257638ee0c3e1e4ca1f9df0080d4bae32bf866763876a99daa0d247e9804b","ssdeep":"384:fBNKeDneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5y:5Nurxh54fVCb++n2babYVoNqfP0","tlshash":"04d23f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d47a67bce","first_seen":"2026-01-31T21:08:57.384918Z","last_seen":"2026-02-19T17:02:28.621203Z","times_seen":71,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4dbb7151aa13c217.css","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/4dbb7151aa13c217.css HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7w%2BZPhcr7AoM%2FlOak6Ue7mn3Przn3ejNbcfEG0HJmP3RXBVc8HJz4XEoIByJasbV5fWgsVC13FgEZ8a84Qc%2Bzw7P4QQxTOF\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"1ed-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce34d370b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (492)","md5":"2975df78ce897504c7865a17d86a02dd","sha1":"75622f0db777dac2055698abcb0eccaa45cd19ca","sha256":"20693b666c550b94e5c07cd379a3223daae26b6ae469848e707744ef33768fa9","sha512":"d06b67ecd2587ffc16184843f6dfefd72537fbc41ea2bcc8306cea2ba049d11d97700e0cf2a7a55df49058c1bed9ad9d44ef778a1eab7ec58ee5a00d7c57c156","ssdeep":"","tlshash":"4bf09059c032118930fb6a1a9ad4e76e1458c1c3718888fd76282ffa9a21f7d4369849","first_seen":"2026-01-31T21:08:57.22202Z","last_seen":"2026-02-19T17:02:28.736Z","times_seen":71,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4b73fe5a475716f9.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/4b73fe5a475716f9.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"83ae-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvEHg4xG95ZEf9wEtVdvTsx7RXM9fXf8zzS6PstOA726jQa7fXzGVDZOYxr2UnYz1AdhODWd6QHJfYtYCvhQv7lj40hrrBoO\"}]}\r\ncf-ray: 9c740ce35d470b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33710,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33353)","md5":"d36b24fc99ee384e0689eef065597a6c","sha1":"8ef86b2640497083b9d8305d48babc41bec3284b","sha256":"c36e1856c14ed3099197c8082b210ea9ddc07a2a7ab4663c8b3e65d5e12dc125","sha512":"5513fdad3b32216d6a72ffef92b37ac87e5ae6ae430c25b3d1b926723eb66fd719678cb5bc560f1f17db468b1ecaa676b908676ab2e2dac079dbbacc7243c59e","ssdeep":"768:7ndxrGZTCyFcQvmOwaCHHZgKIGrBvnKgApILOHz2syklZ0:7ndxrGZTCyFcQvKaC9rgALOT2Xkli","tlshash":"f1e2fa947520ac75de2f4afd7089c412a7fc2120c9186861f2fe5cbe13d9ac97362b8d","first_seen":"2026-01-11T01:55:53.449721Z","last_seen":"2026-02-19T17:02:28.864329Z","times_seen":73,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/c9f15bcd9a791bc0.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/c9f15bcd9a791bc0.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"2e8c8-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG6ye4zxNLi0y%2B%2FOoydZu5V%2BLmgnxKzOSWfe%2BYVfiGWQHGR%2Fm62waP3e0tO1fYKY2FdyoTgUbknd2bcfgoA%2BOdOzr7SCOVEC\"}]}\r\ncf-ray: 9c740ce37d610b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190664,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4de9978e77d00d8cd28e36ff13131e3e","sha1":"d3ba7372f49985df035daa52f1370b259ce034b3","sha256":"007118ad820ebb4087eda4f3427a2889e8a3fb728f84788df294b446305a9d2b","sha512":"ec0baf6adc87fb54978a75f0ac7a8be5451e8dbb6a031a8093f2f50f33d4e39711bf68487f1339120291ceb9ad6c9ae517dfa08b8162f10422dea4a1396dc717","ssdeep":"1536:WaJXdN0DtUF5R9lLviT242a/AHmPWbIsbXN3VQTWA6qp56+e7XlUMOneXKRZ54hx:j0DCdB4t4HgYbPKRT3CPT","tlshash":"4814c6b5a0616ffdfa6f04a5b02ec40cb21d1fe8c74f89a6f6bc3c6116440846ba67d5","first_seen":"2026-01-31T21:08:57.173027Z","last_seen":"2026-02-02T22:33:10.125714Z","times_seen":67,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/0fb6e476b35fdb91.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/0fb6e476b35fdb91.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"194a-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foHeCRI3QWadEcyhco2VwyGc%2F21dTAsH3L%2Fokv2DtWw0vrBo9SBEo0YsWrUlHhrHdMdHEfxTCh4QNoIscPKkK6%2BtG%2FGtLIE0\"}]}\r\ncf-ray: 9c740ce37d620b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6117)","md5":"7554b29439c8f6c37345f5192cd3871c","sha1":"bad5b7974f486e1debe58b943058dcad206e9221","sha256":"ae0a6792e3ffba66ba1135d0bd193e8aab8347dc08da8bf813493dfd4c44b72a","sha512":"96c92e55b11be41234180b57ea457a71dabab8989577957af040ef79589916d3a7a7354f859b5aaf83fcb425ef10d040af7a581109b76fd0546ba1da7d54e6c7","ssdeep":"192:geZektmofqE26khTOJsn+aJ8c4Vpc/n1dWd:geZektmofhhkhTOJsn+s8c4Dcf1Ed","tlshash":"63d1e145e6581361b88802305667f01391ee367f30cf94a8875a86e4e7d699cee238ff","first_seen":"2026-01-31T21:08:57.315419Z","last_seen":"2026-02-19T17:02:28.614782Z","times_seen":94,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-born-wild.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-born-wild.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60834\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:54 GMT\r\netag: W/\"eda2-19baced5690\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0AXS2vVZy5FL9E89vYSIs8mc%2FGYNK39mtXwUPuvnYHKFspdwXHW6gTNMB8unNRl08T7U%2FjPeLfdt%2BeYtt3jvSjbRM9zLCoW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf1ce850b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"348dd7e27a6d863affe7f325a0b739f4","sha1":"f157fb95184f112b45b1fbe28ddcdbc496d197dd","sha256":"36ffc5819360edf9446d2eada84b0952cac8f0b4a807a2eccc00ea1abec5d1b7","sha512":"89f1b8f928ed188ada9c8322ed35347f23e40bb0434d4ee80e8c9db8d61958aee388efd94a3d5062f3fa0f3dfdbd3045fc901f2b7e7e26d16d7a535fe5ed542a","ssdeep":"1536:ybqsLUvlFzfHJKIi+X1huyTNHK6MAzu6IOOHcjwnxX:vsgvlF7JKIlruyT1cbZxX","tlshash":"b45302705ba74960ee44693af4f64d09bb732f682fd3111c7ecc29b68b88055bc541bb","first_seen":"2026-01-31T21:08:57.31879Z","last_seen":"2026-02-13T04:13:07.635225Z","times_seen":37,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-joker-king.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-joker-king.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32488\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"7ee8-19baced79b8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imgjTFHTrcPnSW0JEXWM%2FBABDYfsIUZwg3l2lVLtfwP9CP0zhuYGjSs3WF6D72P%2FQWFeOcTk5QG10%2FCR5O5GA9m9UJ0ngNSd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60ee40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3c11927a0c1142f669298ababb794a32","sha1":"2530b919e06bee7ef79fcbfe2862d2e3c17512b6","sha256":"326f4a2c5933fabf1e85956badafd8483f011d3e95342cf84440beaf5029911e","sha512":"cf8335f07b88e769666157f033fefac33efbd64f627307955afb1881f43f0b51d49ac9522f7ebfe29b0cad3cc0ca1863dfc2c00d7db1e4e2dc15d04187f38c0d","ssdeep":"768:fY6mKzlwSw6VPRsxL23lJ4JxayfyeLUVSpD7LjM0RdYDa:DLPhMxK3lJg5RpLAWE","tlshash":"02e2e10843b9bc93e11e7468ae4d92c8469ab2f3b322e19905db5f50567bfb11808d7b","first_seen":"2026-02-01T19:38:23.428375Z","last_seen":"2026-02-02T22:33:10.154851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/about-us?_rsc=4mj03","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /about-us?_rsc=4mj03 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b443e5d75abb2e0f-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=4mj03\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhcSEDXlh6NcWiQiAuoSXy2jN5UohoM4KOVjlAJEvbCug%2Btmp74Buz%2FLgL66%2Bfcus8EkQvUpPChx97eb44vlpmBs3qptVanE\"}]}\r\ncf-ray: 9c740cf9af460b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/about-us?_rsc=qm08s","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /about-us?_rsc=qm08s HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bda1539e6dd51850-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=qm08s\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8%2B%2FiyKEvS3aV5flMxnmlUxjsaMUFtBOrl0ov1thSEkMXdtdabEukphQHMDt61poxjSa6HMTFeGOmvptiQItXTrcH3kLM1wQ\"}]}\r\ncf-ray: 9c740cf9df4e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19482,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4163)","md5":"66aeb7a639c7eebb97dc72eb714a408f","sha1":"ecf07edd283fc61962fc5adfca0aa7d20e192285","sha256":"4bd792997507d45f04d0a2fcc2cc8880962f1186c0490d1ea6d88fad7395d02f","sha512":"bbc7c7f0949f31c5e6a7b05851bdb75ed1885fb7ea117b7a59584b0caa104958c04a40a994615af9deaa0f8147768398ea191758638bea40d35149bca998c20f","ssdeep":"384:yqxkRwqJNpfMFEBgcXBqi8KiAwj76R80d:hqJNpfMFEBgcXBqi8Kiz76R80d","tlshash":"4f9203399706aeecaa7b0065142ec32ea31d8a77d796cf75e2fc9e6103460742d573c8","first_seen":"2026-02-01T20:03:45.129038Z","last_seen":"2026-02-01T20:03:45.129038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/08c39a0012534f66.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/08c39a0012534f66.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1b32a-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=62TjupdHcz30nGZEWfSJoxMzjuTN89xtnvYTDXUGOWqtTpjo0Gr5ZW80z19dRn%2BXT%2F5N6x8Jxd7nELR%2BzxYMLLlhL3XutxOV\"}]}\r\ncf-ray: 9c740ce35d3d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff39d75e72b017105228a3e3937e7591","sha1":"f2d18c32727ea5c8c3025c3dd6062cc64a0205bf","sha256":"bde5066619da447ebe65deb46930149c780552d9aeaea4827915013d287be571","sha512":"cc6a711c714a6309780c59e28fe35a28e70d35720b3c4f0eb25986f230329c1a1e047514909fc053fdf56233194352b7595f57e4de1271c715d0fbbc315a5cb4","ssdeep":"1536:0N29IxBQi6ha/rqj4gUnFZSul2PmOot685j:05P6M2jDRuPn6e","tlshash":"73b3f7f935d5f48207ab40a6c03f0006f32c5d37189e68a0a3e5ddda756499de1b3faa","first_seen":"2026-01-31T21:08:57.335286Z","last_seen":"2026-02-19T17:02:28.643844Z","times_seen":94,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-magic-piggy.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-magic-piggy.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23814\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:52 GMT\r\netag: W/\"5d06-19baced4ec0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqqH9T9zz4olXTZrnG3Ycb%2FzyPy6%2FeMObiUZ5BlJlbQ1BUNH3lm9pzNoGa1OCTTAEZq7UWZAKVK9HLTwlXGEpCF%2BQULZ%2BW64\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf18e7e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fc8569ce1ce6917b822ad418318a5d0d","sha1":"5a363f41eec8893830d33e4a12a631af6a488d35","sha256":"a562a9511d1ea2bc4ac7107d1290122b084f416b1756c0b4672df2236ae97e78","sha512":"0e8c2cc8b16313b7fd81ff7c92c0d95413eee094706287a5f880dc710a440a9b60d74f70ab1a68ec31b4957a646dce396adc4099512aed14a334664e8f84c588","ssdeep":"384:7bOIVCWSHIRcCnqM/F45P5TZIvh5k5QWp63M47ZMAz6uF92iajNTmYSPciRrk4r1:7bOugHZCX2l5T0kLpSv7ZVz9F9faoYSn","tlshash":"a5b2e0371e5c509904f7474550dc83d30ce3c1a6b01ccaf69cf8645f4ae572bb86ea6a","first_seen":"2026-01-31T21:08:57.298342Z","last_seen":"2026-02-13T04:13:07.615868Z","times_seen":36,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/StrikingHot5.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/StrikingHot5.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52250\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:25 GMT\r\netag: W/\"cc1a-19b7abf21a8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCaukRe6kjOxV2zRfmThnksaT0UxOFQmp5UPxobJjQ2puq0OCw4yvvZ9TlWL4RvXaa%2FmW6Dc9WzrfWytVvYf7kmiw8tyDSbu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5ded50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 816x1092, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31db0b82861c084df7a1706a0b82e2ac","sha1":"98c95a9c9580cc529e89f97bceea38c48dcd8f47","sha256":"c68919cafefdfe471874c666616e704aacae5236edf40d3bf4fa319521d3c8fb","sha512":"672446cd046aad844ce47180e194d0f05e204fc8c301d43a1599edd06a29ae85094de9f7a5854b1d53dec364da51d6be00de64f7a3f008efa0af249d11f29933","ssdeep":"1536:yvavKqVaVIYV/Vexgepx9LuV93ndBBogos:yyPaVXfYpTLuDFdos","tlshash":"cf33f1600936a441fac7eeb596df864713cb60adc3f2c9e50751672ca384dce69293dc","first_seen":"2026-02-01T20:03:45.133333Z","last_seen":"2026-02-01T20:03:45.133333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/DMSans_Medium-s.p.4f631073.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/DMSans_Medium-s.p.4f631073.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc3c-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfaWeQ0dREFy4fgV4achi0j97ctp6Kj5ElAbyZBjBlHOe4xxZZaSX4I7NQ0u7cJxWnxpSYjXxqvYwG3DkhOoVjrctOv08yCJ\"}]}\r\ncf-ray: 9c740ce33d280b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56380,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"6244219cea1110e6ec49e950f070acf8","sha1":"00ea5b83c109e751b844413d32e21b7689bf786d","sha256":"32c8fe1874433bd34674ef1b58037fdb7d1b245d5844076c76c6f3a2c69d6840","sha512":"151abea1c586541b2ee6fdbffea8dc7046027b37599092acba6a6a89873501ac3cd2f459a58df5be30b677bc252b4031fc4c9b4e9b5649a30786682c28243bbe","ssdeep":"768:ejiwYeGvU7ifzsu/ma5tBMPxmMu4mjtpg9IfypSe59QQZayKRgJDE/T+:ejD7eQ8dGZm14/m059QQo1RgJDEy","tlshash":"bf435d42f7158a0dd2836ebc846383f4b777fc34fea2839b5179ab2aed490a14c11384","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-06-04T16:54:27.239727Z","times_seen":433,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/c581bdd7dbf758a8.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/c581bdd7dbf758a8.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"9f6-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04TnnQJsK7XWqZGuJHcBir3%2B2DTTFSqy2JM8mbCKagqBWEKIz90InB3EO7v%2FH3xsE%2B9O5qVkaavRA9%2FlbfIvOL2gguPJVbWH\"}]}\r\ncf-ray: 9c740ce38d670b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2550,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2193)","md5":"9ba2df7dfa4c1e2e0ca7d8cc1e50c03a","sha1":"2f3772527d36b0f944eb7cfa65be65550d061adb","sha256":"9100e90e66e36e7fe0b6f0729980db3e04d2aba354215302085d03cf81903a89","sha512":"c5363fa9dd717d7d4031f0a7fe9c223bb416331d80bf45e573c28c3ef32f6b30e64427b3fd8b6031d039ba27503cda28c231b5e75d42283ac3c033c699d02c43","ssdeep":"","tlshash":"e95176543054776a25361675f02f0119b36e8a75031c6a62e5ac34fd35218e8db5bfcb","first_seen":"2026-01-31T21:08:57.231593Z","last_seen":"2026-02-19T17:02:28.722851Z","times_seen":71,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/games/home?priority=none","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/games/home?priority=none HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-850364fc8e0039c4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMHv2AKRHfwGN2pmp57AR%2Fi%2BmcHqSz54Y1fVQJ9XJPJ9iMlp1LZAQVMvl%2FNlXtEXFfGoLHCxc0MMhyTdYG2ngG6G1cMegho1\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3410-JNmIeLScyJBkdyghxazxaB5xLR4\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce82dd60b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f37feab11f2d0906ad163b94649f6c7b","sha1":"24d98878b49cc89064772821c5acf1681e712d1e","sha256":"35af18de983a7e1faa9d59f497369e71795f5bedcd3c9f563a62350805f00084","sha512":"b1a4fdf503906783f78faf9e8bdf94c4531ba69e9973a0a9d2966914ff5a0cde2d36f31092d4ec571ed2af109821876ca7d94206e2d205d34e1275015918d4d2","ssdeep":"192:Neof7taL3t5NEf8JmxEPv7a29G71GDu4AhiEIT8rj8:9azS710siCw","tlshash":"d652bfbac4954ca9435f6f0110c72d0ef4bd2e2331c81c69681aee3cd99ed97e60769b","first_seen":"2026-02-01T14:19:43.942168Z","last_seen":"2026-02-02T20:55:17.580137Z","times_seen":32,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":500,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?type=originals\u0026_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?type=originals\u0026_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9dc27c1861791705-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=originals\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?type=originals\u0026_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhliAFwy9yAo%2BkBvjO5HnAuMV3iIt6AU1lGSezNKq0%2BEJud55S1sVi1gtHJzu4DxtqBHS3nqX1plBO3J12ptzFkYG3tqcrQO\"}]}\r\ncf-ray: 9c740cf0ae670b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (821)","md5":"bbc959ec3ac9c9e34bb62de007e926a3","sha1":"038451702814919789945137b023d718d7befeca","sha256":"d4c08b840fcaaead99b209b036297cb25ecae41d74e266d7740641be8a3b25ec","sha512":"c211a13769e8f75b0e84fc0610a4de8129cb28c5286df3f295efdc52248701ceda68804dcd2e8e6628502f839d3a848f006e4698b5635f94ebb0dd9b6282b67a","ssdeep":"","tlshash":"d8417c0dc8499db498c9d59a71d9d7016598bf37f1b88da8e04bdca4428b03d0beab87","first_seen":"2026-02-01T20:03:45.036147Z","last_seen":"2026-02-01T20:03:45.036147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-temple-of-torment.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-temple-of-torment.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33050\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:09 GMT\r\netag: W/\"811a-19baced9128\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60JjQ12bI4Ld1iB%2BxEDyL3Te0OJfdpaanNZXv5mlJIddksI5GKJ45%2BFceD7JS0Yw4k8fcrEKYr7rNV33J29YJmVhoTFSZgaN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf40eac0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8baf78e9ec23b28a9ada7c812864b595","sha1":"11de7b760c53e5c700e912542197338b81037d7c","sha256":"a6665df3dba7e5c7dd7b40ea753e4767c11c8d3055bfb4f97d40ada250168a04","sha512":"faf85989192669361413dba0e94827c271cf17805a01ec94a962dc75c2f0a24a55d7e437660edbde80b7276cba79c35045696608f770f06424f9a0e06e0d3f19","ssdeep":"768:Pdh8H/bvJHB7f5N/PbGARwy9kV1VtLd9yBQXJ2yh7j:P78fbvJHdXndMN2QXJN7j","tlshash":"bee2c0923730c800e60d35f518e64904caef1fd08be6d1ae79dc8d458f869b5ee8e94a","first_seen":"2026-01-31T21:08:57.299528Z","last_seen":"2026-02-13T04:13:07.640439Z","times_seen":35,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/terms?_rsc=1p5oj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /terms?_rsc=1p5oj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9a693dac380900d2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/terms?_rsc=1p5oj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0O%2FlEXfP26yuR3Msy8ENNb9imQtu21HwQCF1jDViySm1fK4U0s5mLkiAnCPsw0mMY7W1qfecee3ian9%2FevNi2boAjgmdnhWD\"}]}\r\ncf-ray: 9c740cf8df300b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61070,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4139)","md5":"570201d283db710a4d4edee0b7be897c","sha1":"1c29e2a323b6e86f8a5bacf9ed79df77da5de902","sha256":"106e847e01c367739f3bfbb16fecd72ac170f7c0e6299ab6d271fa2cae754f69","sha512":"f3e0102628278755b683c9dbe3d349a13eebfa8ea73df08dfe267a68ef253822ce986a22f782c70974a0398fb7bfd2171765f589345c037bc2acc38ae0489f24","ssdeep":"1536:lf8iZdfLeY1QULIZF2ZpAhYFLZ4IpwSUT7WnHoyvpUMN1JOiKyNTdLiNLV0z1+Me:J8iZdTeY1QULIZF2ZpAhYFLZ4IiSUHW4","tlshash":"73535f6da70967adcaf70071240ec1ebf31d4238db66cdbba9a95b290347934593b3c4","first_seen":"2026-02-01T20:03:45.140211Z","last_seen":"2026-02-01T20:03:45.140211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"65118-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMZ0WgYHI8XPrUxYly6cDF0VUMpl2vfYBrTxIwlTDpAYCskiHpwl6dF4QiD9VLHD2TIFlmk%2B2YIdlvgtsaHAxoAc2Mw2mZwz\"}]}\r\ncf-ray: 9c740ce34d2e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413976,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter SemiBoldRegular4.000;git-a52131595;RSMS;Inter-Semi","md5":"4d24f378e7f8656a5bccb128265a6c3d","sha1":"d48310d2f04c57af1bce0851e053be7b58b25dca","sha256":"0dc98e8aa59585394880f25ab89e6d915ad5134522e961b046ca51fad3a18255","sha512":"38b18d9786046633e4992308c88f11ca5ced325f805eb29b3000533459e85dfb6cd87655f1e285af8da22ac04722ab354dbda24667297b56cca824ef227373f1","ssdeep":"12288:SMPc0C2wQtzPziKFfAi2bNru42U5CB1c8:5hiK9AiENr/2UYc8","tlshash":"f9946b17e705d71ecd1a2d348af58bd033b9bc90b91ee24bb05a3a09dd971f00a9b5e1","first_seen":"2024-06-16T04:57:18Z","last_seen":"2026-06-04T16:54:27.208445Z","times_seen":244,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/48f61cc265d47694.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/48f61cc265d47694.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"ac9c-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSH8DFFe%2BCHjLvos5OZYF9kgmgs41f%2Bh4WLEenno4SiRDbr2PhLcPr30ZPXZbWzgrYiG88ueXdMOZVPHupN%2Bi4DixWniA2Nn\"}]}\r\ncf-ray: 9c740ce36d4d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44188,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16970)","md5":"dee46bcb482bf82bd4c1029f187c68ee","sha1":"d7cf4d6188a9313e31590dacf5902ec8b1f1b311","sha256":"1943b9c626e8cf07bb3fc5f19f03effe59f3be189438303a477919db148bfc7f","sha512":"ac80a472ed1005853052a9817975646693f125531cb9f9d5ce6d69b490caa8c18bc06077c18d1ef30fd5b71d39b97c7fcec9559537c9f12ecd8c6e972743b9a0","ssdeep":"768:UjLnQztxulYXI6KJxcoQNLE5k96UJGSgf5djPZ+a:aLQYcNLGk96UJGSgf5djPZ3","tlshash":"d9130959b021ecbb223bc1fc906e1416b26d5d79e31a6a24f3ff896c131494531a3fa9","first_seen":"2026-01-31T21:08:57.327027Z","last_seen":"2026-02-19T17:02:28.753031Z","times_seen":71,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/eb768583117478cb.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/eb768583117478cb.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1344-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj4nAuQFDFcIa5VtX2kWf5J4lK85kZd%2F4Qf1Q2b%2FaHWWQk%2FzCbpc9i92pXA1hBtncsXKiEoBsZpl2%2B3ChUBwKzOfWIlbnTp8\"}]}\r\ncf-ray: 9c740ce38d6a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4575)","md5":"cf2f085e4fbbf416372c204f062fda78","sha1":"e25ffad06ca3245489a474478f05d78d69203b5a","sha256":"95ac79e9e04a35bdc74d23248267dc235930c14e20b59c6536065072ce08696c","sha512":"1d6369070024d1452fbf563facc2e95332b477bb830bb3c1786e92137ce15d17dd0c81729eb5ea3eedb94d8195ad0de39f05b835b1a0f702f838f586a0dbddc5","ssdeep":"96:RgjKIjI4v5ksYquBKZ/L5QXqInDfwxbz4o:a+RRBs8Dfwxr","tlshash":"cea1ecb9031ca6ec7887446c23229423636fa1bf75de53b04d6fc9b458d74c8e7634aa","first_seen":"2026-01-31T21:08:57.370006Z","last_seen":"2026-02-19T17:02:28.648678Z","times_seen":71,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/39b6de55b9371bf3.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/39b6de55b9371bf3.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"8533-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkQyF5ZqLApbuJ3mLR4qtsf%2Bsfr977rU01d5TxCl948S0luFC17W5OqaoOOVxGYm6qQ5xRx2z99tobMYE4CLoEjWHlCBl6As\"}]}\r\ncf-ray: 9c740ce38d6c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34099,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33742)","md5":"7e2dc4e87b73f4b6aab56debbfebf935","sha1":"a834e2263922aaa560d0191e13557ca7aa738bcd","sha256":"03e189bd9bbb896bc2e6bd24457db1a19881a3461921f362e3e17d024d198962","sha512":"0455ea832815815a7ab41cbb6855a12536e6eb18c9da16f650c4c005792c5b309e448f26a77ba6caf7e45b57a4e3fdd9d03cd84417abc8db3bff57970801bbc1","ssdeep":"768:dM5CSKw6XkoNCarvCYbvp1xEuiLJVgQinHTiv:dy+q4vp1xUis","tlshash":"22e2a2259550aafca93b04b5f57dd04c302dbedcce5a8b68b27abc664a514c03e42f87","first_seen":"2026-01-31T21:08:57.232883Z","last_seen":"2026-02-19T17:02:28.837927Z","times_seen":71,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-ripe-rewards.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-ripe-rewards.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35314\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"89f2-19baced5a78\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BrjGzgibuASE9ud46M%2FjH5jZFtnpTHGGo2h9peduhpvAZ3WFlmMea3vIYxyuRYxMtrbqLd7mSnYm5HZC%2FeQZufFtRrG9Ajm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fede0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"640ae5cf880197ba0ef8c021333cf34a","sha1":"04c997a7da5b9f5eb29a2f52dbc27bbd834730d3","sha256":"5d6a47c039e579e58677668b341dfcfae20ba74b450b158f723484550305c54f","sha512":"6d70c8b251fb90bc6dc4833b6ee9e4e2b3d3da90649c4c396beabcb4e6444ae9eaab3b9270efed165bf815e805f7894db2303c0ea381032c6e3ad5e198a42dcf","ssdeep":"768:D5qUco4eBYmBlkSTt90ZRv9WBVUb81iCz6ZhzdpAWmd:DYboFVx+Zp9WBqb8Mw6Lzdpg","tlshash":"42f2f20b50234c7d8771d4cf702154f5bcf2dbe7218299e660b66667dda2ee85a8c03c","first_seen":"2026-02-01T20:03:45.148076Z","last_seen":"2026-02-01T20:03:45.148076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/about-us?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /about-us?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-8d8aa20648a2c112-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oA1ckdTN4ZIYorFjOs5U1cepmY5w79xudpfxqk5N61E2IJVkfLtUZiIbNDhaYVMyXTyKTh45HWTA%2BdWEd09Zp4%2BLNalPUXEe\"}]}\r\ncf-ray: 9c740cf98f430b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/providers?_rsc=hh64b","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /providers?_rsc=hh64b HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a3c511aae6033114-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/providers?_rsc=hh64b\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LG%2FSU2725koFelsG0NSAvSJXarqsFYRdl0uMbfaPNZYgjmhSRURY2vpjTJNZj8FGWA%2BJgaa6PMoleJlZJ%2BtRMidxn%2B7TFNPA\"}]}\r\ncf-ray: 9c740cfacf650b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/group/slots?_rsc=1qd1p","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /group/slots?_rsc=1qd1p HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-94318079646be887-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=1qd1p\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVptq3NjhxY2ElUueZlbH6fFuJ2kF6PYkORH0kk9pFhB36SFVaY9qVRLPwtUvejc4s9cp58HYFbK6fDn62YLK4LDCemnrlQ3\"}]}\r\ncf-ray: 9c740cfc0f760b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1623)","md5":"3141266990260d4ec560a7bbb9008f54","sha1":"294d4aa5da6492ab89d7bc327bef2b3c6b5a6196","sha256":"ae6e4d5c165c1016bd85f6936636db65608809a9407ae038a76971d6f225cf6d","sha512":"664a833342e17509aacd6dc986cea4da264a16f4d57bb96ee5f7b9abd2e0741c0d7a9dd651e56c08867b0b819a634f17051bf5d4f6b10a031bac15a751f0e46e","ssdeep":"","tlshash":"6b4181abd80efc591c34cc5c2e6f6376958ad8338d345caceb9edcac05591275b990e0","first_seen":"2026-02-01T20:03:45.150188Z","last_seen":"2026-02-02T22:33:10.19216Z","times_seen":34,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vuxwin.com/api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=M3V4PdblLxFCL-iNABPz","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=M3V4PdblLxFCL-iNABPz HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://vuxwin.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: F698R9JXg+v3HGgEEvNPUw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 01 Feb 2026 20:03:08 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 93aLkP/Ai7o+PBu+NhNBLZTZ6ec=\r\nAccess-Control-Allow-Origin: https://vuxwin.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pwUJBze2SIA8MI%2F5OlOqrHiFAzOjU1co4iWefJo42eIzTSTRmZMqQUueJV8%2BCJTiS27CtMhFi59i1daTpPZX6j%2F8kJXGDi8HqFYfXH3kY29QMLsalKhVbuRzAlMi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c740ceb0f9a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=496\u0026min_rtt=467\u0026rtt_var=144\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3107\u0026recv_bytes=1627\u0026delivery_rate=7634446\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=bbe3c83ea16d2255\u0026ts=182\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":22,"connect":21,"send":0,"wait":165,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/terms?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /terms?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9f59ce52ce0312cb-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/terms?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k95JN3%2BzR3u%2B0dGZJupJiaa0LQdYnFP2F8RfFo5saDX%2FGKldqh0qE8Pyb4QqAqgQ8vaCikN24cCu%2F6iXVtsQfIjIQNNWJbSt\"}]}\r\ncf-ray: 9c740cf82f180b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/i/v0/e/?ip=0\u0026_=1769976191193\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /ph/i/v0/e/?ip=0\u0026_=1769976191193\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bdfa456a65e06d66-0\r\nContent-Length: 1595\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2%2FKcn8hp4i7XO96NMYBo6eLF8tRo%2FPseFxaYejeXWB%2BLdKG4lanxEhjL%2FpDyp%2Bz9VGOXj6Xf%2FbjZYHIjxahvZzfm3RaGyNF\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\ncf-cache-status: DYNAMIC\r\norigin: https://vuxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bdfa456a65e06d66-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.205\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\ncontent-encoding: br\r\nx-middleware-rewrite: https://eu.i.posthog.com/i/v0/e/?ip=0\u0026_=1769976191193\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://vuxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 52\r\ncf-ray: 9c740cfb0f690b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T12:58:49.954122Z","times_seen":34819,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/providers?_rsc=59a7h","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /providers?_rsc=59a7h HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-86ee5bdafec78cbb-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/providers?_rsc=59a7h\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9VPjeUuHOVrH%2FyEgykKt3i0ZbAlTRFzG8FSNH7Aj1EN43su%2BxuhWyJwyBSLP44yuZcG0uuT4YGJyNfOkmAnhf1ZEvOXk8fib\"}]}\r\ncf-ray: 9c740cfb1f6a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5005,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1670)","md5":"67036c76fe3e5b20607213a9a6c9ac06","sha1":"4c912249030b5642d46cf81abaef75760786358f","sha256":"cad8279542c6774bb471c6c083d913a1eb0837a79b6bcaaf0defa6712298c196","sha512":"7d5c8ceed5c695429a83c3ea97d26c37d1d4d5146e35ddc4d16823072cfe608e42ca23dce7f187949f0eac0692e7da92842af263f48b649cbe83f9e452eb51d4","ssdeep":"96:3rnkJZVqqegCrnkJZVqqeo3eYqRemkvVKZ/L5QXqIvTM6p:bnkJZV9JqnkJZV9BBqRex9ssTM6p","tlshash":"eca1ce6bd90eed985c26cc0c2d1f5377928ac873dd344eacebaeddac05490225f9a1d0","first_seen":"2026-02-01T20:03:45.153247Z","last_seen":"2026-02-02T22:33:10.137179Z","times_seen":34,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/b56bfb8753f2111d.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"7175-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UoqESq2q%2BKOxSQgJlpxxPagB5azy0VPj2MHiivJSbD%2Ftsb95U5KmYDP4hjwT%2Bo0t5USdIuzyU0C56hTLHSo2gwpvqfVtx9fE\"}]}\r\ncf-ray: 9c740cfe1f880b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29045,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28688)","md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/gold3.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/gold3.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6180\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:25 GMT\r\netag: W/\"1824-1930f241c08\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nz7bZ05p1TMya6GIPYLTmOr9M8Xa4wU3Gtio5fZG%2BPg42dVY0iEK0lIBrbyLRdD0vj9FQU4YOIxCAEYwTx6g83fbNNxaPd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cfebf900b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b3b6925c68588a11877b4994c793345","sha1":"360d0a1cfe4930a8160ce69d30441a37bf0d56a8","sha256":"9359737daba5e683c10d20dbd81bb7b441ae5af9c138f085aec6da5539be9788","sha512":"751d244e5eccd6c6805f9b268fe435bf81381335371c92ee68e25d6ddedd0293c33a6b09589cc849d291cb5922ae2cbd3ce58cf15a137624faf9a93c23f3518f","ssdeep":"192:sCDeuxFQkAd+vAGo+KXl4R//v2NiqIvhrBR:sc5eC2xKRoIvhf","tlshash":"9fd19ef9a15ed1f5b6abf40e8438517b6f8fe8fc56516c0c49180364f24e275b444837","first_seen":"2026-01-11T01:55:53.553476Z","last_seen":"2026-02-19T17:02:28.870783Z","times_seen":41,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/i/v0/e/?ip=0\u0026_=1769976197037\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:17.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /ph/i/v0/e/?ip=0\u0026_=1769976197037\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bbaf04becd40f35f-0\r\nContent-Length: 1161\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976194034%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:17 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UN5slE6yO2wZ94cUmiZczOC4Re30Era%2BS8aWP0QNScobPXJCFnTRUvBnq0kLFbM45xE3MuxNXhbjmCL%2FGJMq0ACIOpZ4443\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976194034%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\ncf-cache-status: DYNAMIC\r\norigin: https://vuxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bbaf04becd40f35f-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.204\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\ncontent-encoding: br\r\nx-middleware-rewrite: https://eu.i.posthog.com/i/v0/e/?ip=0\u0026_=1769976197037\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://vuxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 32\r\ncf-ray: 9c740d1fa9aa0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T12:58:49.954122Z","times_seen":34819,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/ad138cba44450f34.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/ad138cba44450f34.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"75e0-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJ5uK8haY9sVdDSVUdLgvkzoK6qe%2FvNtuHoEJW5FWadMAqwEPfhe%2BmXW88NyO6g%2BYV3eevdfC4EUdBPkgcwHLNwnuEoZS0%2Fn\"}]}\r\ncf-ray: 9c740ce35d450b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29819)","md5":"11ffb96341f3b620a5370514b73e3db9","sha1":"2451d15feffadad588466305f4a236f382f45e70","sha256":"a9efa5c83a5c5075fa40ef7ba4f7d964399f82426d6417889b7c84428f1b96ac","sha512":"8bdf52566b8af67e5482d9927f81970943cfe7386c5f27f4108d7d52c356bff8e9c971ce4dd132d8b5ec63c456b3465abf1bae4cb6a236f9a759ab39c94a734b","ssdeep":"384:wVm7PRyzVJe6cgrziQ+rI0TJOMLr1299HlDitlKQ96Wjzr:wVm7AxcgvSrTJhtcMLr","tlshash":"01d2b97071a096fc6ad344e6b43e400cb1386aa4c96d5561f3ba7cb8ca119c97e77f83","first_seen":"2026-01-31T21:08:57.360627Z","last_seen":"2026-02-19T17:02:28.728752Z","times_seen":71,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/b24b62029e7b77f0.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/b24b62029e7b77f0.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"620e-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PW64JLMvcu%2Bl%2FaAoQGYcXoTfSysfma3GS1Dntvhli57NCU30%2B9soLV7aEH25JmGoUiX04NoctPKc3t6hGr5f354lmogjaDm\"}]}\r\ncf-ray: 9c740ce35d480b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25102,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24745)","md5":"a3efa1496fb3790aa32be064c1ea58b9","sha1":"12600f977dd39b4f9ec71acdf338a52e0dce12a7","sha256":"96c4e85350af7ca6c9e95dbea100a3ea00f644aece44c0076c936e4c9f8894a9","sha512":"18140f500096bcd594c1109049ab0168549583ab1c260eba910b89ecd8d0749f2c5b7d602ad66dd153f685eadb2361e5a279ea5ec0b8da170082037711971606","ssdeep":"384:wHGENcWB9YdI5vwpLFRXkdJfWn0MfzO4uE7gj+fjK1iTCMsJ9oWuniaoJQdmAmQA:D2veRnAvfMCJ9oWuniaoJQdmAmQvSeVa","tlshash":"f6b2e8bc32117411db8710a9c0ef4d06e12e25b6220e8465b2be9caf25b5ddd50bbb7f","first_seen":"2026-01-31T21:08:57.278665Z","last_seen":"2026-02-19T17:02:28.869737Z","times_seen":71,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/e3b0cf32d3668e3e.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/e3b0cf32d3668e3e.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"7ee3-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FSrIo1cpmebYNiSWoOWQAxFfpf9JpjK%2FMOwKBs%2F%2BNRNOH05WkKUK9QnLB9oQ0zLKST9HhGwQbPuwrn%2F08vO7VfUoGMbAuED\"}]}\r\ncf-ray: 9c740ce36d4e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32126)","md5":"4e5379c1bbfbb186f837f831921c4f13","sha1":"e3b42b23015fe4463332662702dcbdc12efd3256","sha256":"fc40324411b1ef5263ea87012729f52d443136ffc93caa8940b43297f86b0c25","sha512":"45334f3cda20eedb7c3304206c9ecda79b42979634544f7eb54ae9b6fc8ad133e9b0cbe0dcc15585f769e74d50e0bbd599f8a2b5fa43a1a3d844e250053185aa","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlDE3BkefskEJ5sa:cuqu1gk+eUVkX+W3wCDENfskEJH","tlshash":"bae2a5e63602ba73e3dd01da50b64459e37e255e2009402cf97d5cae3a78949c0ebb7b","first_seen":"2026-01-31T21:08:57.293702Z","last_seen":"2026-02-02T22:33:10.107202Z","times_seen":67,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/privacy?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /privacy?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-98463a030d653d19-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o78NCfT8hvfGZdvH%2F9I0h7KaMQU%2F157N8EF4tw2OZlhRFRp%2B0ctk8fjeM2YNX6cvQBQ%2Bt%2Br%2BaodQsmR%2F%2Fgu4bM4BDc2gOXFH\"}]}\r\ncf-ray: 9c740cea8e120b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (947)","md5":"7ef945ac454a43494fe76ccbdc0cfedd","sha1":"2887bbf6975e007daeb2cd0592e2132f1cd53d03","sha256":"10e3569489383488dd162b93c20db5c7ff9389218031ff4efe1483b24cdb2fbc","sha512":"d0942596bc3c282d58b835f4938cd393f0e7c7c3a92a90ba8945ef8a67d1ff29718be8467a48101a4ed5f1addffaf3966cca86ee58fb913eca9692be37093ca3","ssdeep":"","tlshash":"2651ae0dc8499db498c9d59d62d5d7016588bf3bf1b88ca8e04bdc64038f03d0beab87","first_seen":"2026-02-01T20:03:45.161017Z","last_seen":"2026-02-01T20:03:45.161017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-rip-city.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-rip-city.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30170\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"75da-19baced79b8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfrriGlpn4Cli2xovimYSp61eudRLHLIxm9laK1R62spDWnlNdv4QhK2333%2FFA%2BxiaIFEX9plqsSeeuoe%2F5A%2FX1VqeM37GEC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf16e7b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cbacaec682d5584537022ab25afac216","sha1":"a9b36ab6b46b112baee27269d09004b925505f08","sha256":"ac39fbb15e59d3070388494712f8b3b03da14fc17435a082a78577ab023e77dd","sha512":"42e75a2384bbda29005a8f96ddfe8a52136d718aa5a43d47a0970b942196c417b0202c3b0d429f2996d7c62e8e596c747d8b0463bc2fd39a3686b3e9f198c8aa","ssdeep":"768:mxup0eOHd4PsNDlvGlT9NNsNNWiDE43yJEimM:Mu2lGsNDsh/OhEph","tlshash":"c1d2e03ed7180727e3af624305785de0c1b6bd789aaaa93463ff90c071d03739a47966","first_seen":"2026-01-31T21:08:57.37226Z","last_seen":"2026-02-13T04:13:07.576918Z","times_seen":36,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/home/banner_blue.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/home/banner_blue.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 346328\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 28 Nov 2024 17:51:34 GMT\r\netag: W/\"548d8-19373e65070\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3m0U7cS7J7piA8xe2kXnrC7abXrtcr4GNjrO474KUSebHykWutvWs2xNxx5JWLUmlELU30Luyk9hc55eWPM4HKEHwBiI0uL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf2ee9e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"258caeef71fa47f5e6268b4b1a0a6b03","sha1":"7d37eb51c4d5da68acce58237e7433d88ac177a1","sha256":"7cfefd291528ea7af2958e9725c412133c8e6ce380715b5e879e36306a133057","sha512":"68aeb1ec8ab4a1dd9c203b97571f263c0610d4d27da4674a7b98b85103c7a2c717a26a69057352b40edab1cee07f433803774b52e20463e638f118233d4f33e4","ssdeep":"6144:1bWZvyoqJ0Jf5KFuuBiYo+ytRpJqIU+Q13ZVAjGbq4AfuFeVizTHRykmOYVfOE/1:1SvyTJ0LKHBiLtcIPQBZVAjGbTAfuFef","tlshash":"6a742337eff90923b01d93edec8a1f81181fe8a64f15166e5ad2d65c143cd912806b9f","first_seen":"2025-03-15T18:38:34.509263Z","last_seen":"2026-02-19T17:02:28.815656Z","times_seen":80,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-fist-of-destruction.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-fist-of-destruction.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36116\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:53 GMT\r\netag: W/\"8d14-19baced52a8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJIk%2F%2FOU2odxwCLqUk%2FItInQIoCc0YIXEZdo3uCzqeGL%2FhXwo7JYPjZjm8CtedjoCcETYIUr9o8cplTuoj8LSVMHgssAhUVe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf42eb50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"061e101a0e6a9e12feba81c7aaaa6eef","sha1":"89ebed132dd8542a1cb3b5cab557da9164e0435c","sha256":"e8cb74832de1f280761e93be7d7e52e7293b6f6dcefe08ae988d68bf9363d685","sha512":"43b39c78039f08db0fcbbd0f340568b1aa5bac2c5a9af408cd1b5178545e5a5dfbbe0ffcddc3c876c9a66cdffaab54ef616f3fba2ce72d501f8f9494c6115c0c","ssdeep":"768:7wdjjYX7y8O+Xhk8ftGB6AnstnVk2xUAA4F6cl1B:sdHYrrr68ftGBpsp1A4Ll1B","tlshash":"66f2d004b3314d10dd1aa1301eeceb92e3f7a9da4fa6d1257dde854b0f48411ec9b6da","first_seen":"2026-01-31T21:08:57.290761Z","last_seen":"2026-02-13T04:13:07.637786Z","times_seen":35,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/reviews?_rsc=1q2wn","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /reviews?_rsc=1q2wn HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9e940dd8203d0ba5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=1q2wn\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtwO96WpPoM3tSaRKemOD76yNAEf7bu6MW1zB%2BXlwzF%2FeNijQokazqpSlChW%2F3VJAX1jfQ1%2FxLP9pIDPA9%2B3JVKL77UP%2Fxw7\"}]}\r\ncf-ray: 9c740cf74efe0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/ac1ac1fac020d469.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/ac1ac1fac020d469.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:02 GMT\r\netag: W/\"8137e-19c1abcba30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFLDsr67k41EOvezycTq813kE8b5r1xxyakZHG4osxUxcjSyeYy4WW4A0ZfrTSAC6IdK4LcoB6I2x1qNEOO9I1sDsFKx5Lmh\"}]}\r\ncf-ray: 9c740ce34d3b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529278,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55790)","md5":"4f582540052c0f3e6dcd9264a27e4873","sha1":"e0edb8ee158c82b58ff2ecaaa40d44dbe64541f7","sha256":"d6a8f0ca9d16f84806dbcb0a90cf39c8f904676e77e81a6186fe53f18ce2ab1b","sha512":"c7f888d495a8e4dd260535c0ab13bab642f50378b22d72f287fd4d5cbdb7b1e7f18381f5d970b18d91a522d996c65b0274e769f226c1e870efb6a3a308e93c9f","ssdeep":"6144:Da4781+VuYZlk8X4QAZt7dIUR9yHnE3Qer/Ut18OZzljzC4t:9PHAZBdIUR9yk5iZzzt","tlshash":"2ab44af93695b1735bb602a6407f1002b338196b240e4864f365edde74b884aa1f7f7e","first_seen":"2026-02-01T20:03:45.166965Z","last_seen":"2026-02-07T15:13:58.801993Z","times_seen":37,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/be7248fa84c6d551.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/be7248fa84c6d551.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"9d3-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbxpvOPrPevN5IiSwo%2FSjzG9gmctMRPtNZlRB%2BaV6KhvlGtCs0FBdU2q8S6anOfB2WsUyaIscZc%2F8wMPyj0ZlMUv%2Ft8CYXof\"}]}\r\ncf-ray: 9c740ce35d3f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2158)","md5":"598a7c75a166616da34d0720a50b9cf3","sha1":"35eccbe396ae1d530fb0174811f94c4a35dd1c10","sha256":"99be381c3d3f98808a540d62ec9cb7fe1797ff9e3588e5078a26d52374152fa7","sha512":"5ee7366a017183c0a2049c1735a9135a139e62ed6411726d18b9edce9ce57e7d27bf5fe1b8ce6f915773d1d20e0c0a9cfa9ee383dda62d3a65043daafe744328","ssdeep":"","tlshash":"5651a5413444b164353629a8a0bf000e766e1b75834cbe3296fd74fd262189cdb676ef","first_seen":"2026-01-31T21:08:57.246674Z","last_seen":"2026-04-28T01:10:54.169753Z","times_seen":182,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/699d240ba76ab6e7.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"9feb-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fc1PjscP11wUDp%2F4fgeHsKUjcwkRLh%2FhpQoU3BBt%2BFgX3FTjzFEMm3KVgFixOobhciTwcJX6n4nGAMU%2FW5FnbSOiQGv3cUfm\"}]}\r\ncf-ray: 9c740ce35d490b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40582)","md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/e/?ip=0\u0026_=1769976188237\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /ph/e/?ip=0\u0026_=1769976188237\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bba7ac4a529c72e9-0\r\nContent-Length: 861\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aFvtt9VuWI7DJSN8PLFBVKGS2WH1QWGIL3QlCwTzl5ogxGjgb4%2B3tbyQSIH1VEbE93Trm5Ey4ROwFVVNMByDQXaENEg5pae\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\ncf-cache-status: DYNAMIC\r\norigin: https://vuxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bba7ac4a529c72e9-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.204\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\ncontent-encoding: br\r\nx-middleware-rewrite: https://eu.i.posthog.com/e/?ip=0\u0026_=1769976188237\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://vuxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 76\r\ncf-ray: 9c740ce88deb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T12:58:49.954122Z","times_seen":34819,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /ph/static/dead-clicks-autocapture.js?v=1.318.1 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.70.251.208\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Li96ayxVZ1LdPBYz20clBum5YgL2Ij7e%2BmV5RXSmCN974Be3fwcFljGUhm8E1DuIiQZ9NnTuMBohhXV22SVgFbMRWDst1cxe\"}]}\r\npriority: u=3,i=?0\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\ncf-ray: 9c740cebce290b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/bets/lastWinsNew?filter=highWins\u0026limit=10","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=10 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9ba9159a8178f225-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXD4IFd8CJ1sSbTJ2s%2BLN5kvp8X0QwpJnEzwruCdxZAsZK0hsN0grHH%2FHUOrpVseplf7DC3Q4MWRy%2F2Sa17w5XGBlV8odhx3\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"9e4-ksGKuTmkYodxJrqLzOSnwZgk4vI\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cf21e8b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1162989ae2f93e1a8800178c0a7efd3b","sha1":"92c18ab939a462877126ba8bcce4a7c19824e2f2","sha256":"8a5cf798e7928efc0e42e8411965b39b00cac78914853e072b00bdabed577a89","sha512":"4ca9e3c5475c697aefda57f7297a8641bb42f4820e1452644f4309bc25e08491d5176de6352c3f5c45d8a01894ee5c70e1cd83035921cb586d9945c0b1ff67de","ssdeep":"","tlshash":"6151c03550fd28a8d04d158671c63616a8ed751718c88e908faccf3ee2f8959ed056fb","first_seen":"2026-02-01T20:03:45.173564Z","last_seen":"2026-02-01T20:03:45.173564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/bets/lastWinsNew?filter=luckyWins\u0026limit=10","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=luckyWins\u0026limit=10 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a59f7311fa8e0442-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VIi7nmmGlhgKhlzfihaLGv%2FwDgEu3N%2FNGVNwKPG80Eh%2F2kb9sAQ%2FOpeX0d2atAN12FkZ%2BscQ8pVhwlfJmGtYYZxG4b8dG%2Fj\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"8b3-NU90swDne60zVfTjmpGGbdeyG3U\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cf21e8c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"163fbfe294d5052e85ff1579793453ab","sha1":"354f74b300e77bad3355f4e39a91866dd7b21b75","sha256":"6ec9274a65929c147b52f7d47226b6910facab429d0e4c9856b8609c558b79b3","sha512":"18d7e3617b51e7bbb361f3da7b8b859b01b8a06df5ee84a07b00f9d5817679352d2acc2b1e7c8b798e747849a08e8dfa671c1caaf4c70a73551256effda51c02","ssdeep":"","tlshash":"95419d3e60b81ca8a01d09c6b1d33955b8ec641728c8de548b6ddf3d92fc899e8169f7","first_seen":"2026-02-01T20:03:45.17587Z","last_seen":"2026-02-01T20:03:45.17587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/platinum2.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/platinum2.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6378\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:40 GMT\r\netag: W/\"18ea-1930f2456a0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAbnelc8iVnCbXYOaUN2NloLzDTdfQjl9ddeRSGHdBUDrFYWpkzqoQi6eRqOiG5y8y4dU6aOcTjYBl%2FrTPwYlIDbJ0MJQ4kv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf60eeb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a423f6be8f0fecf632a0f5d0b7d9c02","sha1":"467f574178cf7fcee18c4c6a7929e0a11cef1f0f","sha256":"66b2d04dfa37598e4198f58f697e2c22a001f5855036be548b033469ba34065c","sha512":"e3433d8eadac1e5e87ef2ce2da4920e5836ab04ddee60126714b3dbec42c3dbc7bc2969a39d004fc2cca26d7c7d7adbcd8ade2a9dad7af03dbf24775280fdc0d","ssdeep":"192:PS7I+JuOAeimepdWkN4AgW2KYNQgbC3wFeqUqU:PIIuzAvrdWdAgW76Q+CgFeCU","tlshash":"c4d190114199f84a0569089398bad3dac34000dfb37a52db1392d372ee69d7c2d6c7c7","first_seen":"2026-01-11T01:55:53.573014Z","last_seen":"2026-02-19T17:02:28.751592Z","times_seen":44,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/eff55acea53ec0ed.css","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/eff55acea53ec0ed.css HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSO9H8vJ688UNDBNTLxL%2F29Os720sMebFNcj25%2FRaa%2BvQiO0zFu9yntSRw7MfWfByCjBVjyR70VwzIdkn1TcwP%2BRzZBMgVKY\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"53-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce34d330b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"765bf9d3ef8ff10be0cad5b6d4e3daaa","sha1":"aa1b4bc7fcf48c46eae19700dd7509519aa0ba85","sha256":"f403a5500f2dcd2ecf20ed8f0d77487d89495c3d3789182da4975fe7db6e6559","sha512":"8da6091440e8422a6931d64239ad83324f260ae3fceb164b1f20954db67764ad5425cc19d1ec48870932e42f9e70c21349f9ea3179ae77bf8d8c1ac547289915","ssdeep":"","tlshash":"cea012804541f754e5d148f3d0ce2110888c4718019485e421541de0980742c1372f4c","first_seen":"2025-12-31T07:43:06.46324Z","last_seen":"2026-04-17T17:22:40.725573Z","times_seen":109,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/a85c5f2112ae0905.css","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/a85c5f2112ae0905.css HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"ce7-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZVhwpK8pxQBkQlNo%2BVd9KVW1C%2BdrgXR%2FYhaydd2gzz9w2GpdVjpzj4ILt00v%2FWNu%2FVv89hzbX0puvWQ58eXzw3yXKsblhwz\"}]}\r\ncf-ray: 9c740ce34d350b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3303,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1085)","md5":"e0eae693638a4faffd4c9f557a7438b1","sha1":"6bfb8474afb2f4ba719f35fe3dc2aef001107552","sha256":"5d3675b31c9a19c7c528d457f5543f31e62ec5d85f076f8de0ca5ecc8bb47367","sha512":"3843c89db03ab7a8f9e518bd9e9590c414ecfcdf24e6eb6ae8ef9da51dbf37c9bebc3c1e08072f7cf75ed6b5610766e024574425042890a0d93396e2ba46ddfa","ssdeep":"","tlshash":"e8617510011e923ad8b59d97778e3fa13ca8bc90a5795d23e5290d2d8ad7c7b13f0f29","first_seen":"2025-11-23T22:59:50.498332Z","last_seen":"2026-06-04T16:54:27.244297Z","times_seen":208,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/9c439f77bcf7138d.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/9c439f77bcf7138d.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"ae89-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHU8wrrV8L9VYVF7sMAYHUQ1mseMy0MJ525sa9WqJiFOXG7Z3quY6%2BmEqwauz2kMFC4n8h9f%2BOgItKE02SHwIyoobBgb1eA0\"}]}\r\ncf-ray: 9c740ce36d500b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44324)","md5":"84c3a7bfbd13e6eed8ef2600eaddebdc","sha1":"492c5eb4c2b6ea7d50aa47251107d02af9a99efa","sha256":"c010c5927a47a70ff2fba12a2c2fc224103a5ba1db45bff25a3c4ff53a7ed2db","sha512":"ba4d7713a6c6d0abc5f738d03df05c512d350afb9d0fca1ab43758499c61f0a263f9cc412611e7d64cbbb82481b03ea62829c5cd8719234fa3f46bac724dabcf","ssdeep":"768:B7Tl+Bi1HaSiLD3XirHJdPYKENWNDRYEpEzf9MSnS61ls0c2kXBdnXDnI8qhxCYb:B9+McSiLD3XiWIDRY0EfUH1XMOYb","tlshash":"2c13d8da73607251a3cb515cc4af0b81733758ec2019807c3a7da9cb69b0a5976bf73a","first_seen":"2026-01-11T01:55:53.441745Z","last_seen":"2026-02-19T17:02:28.745023Z","times_seen":73,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/3465237cc8e84745.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/3465237cc8e84745.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"ba7-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PwYt4K3cs6MSMErQcF1QlMsL8PMSYqFPXpid1WNZ4lr1X4Z6JltYT2EApyjUTd02%2B8t3YRDSbDoB0dbTfDadi8xP78%2BoThy\"}]}\r\ncf-ray: 9c740ce37d660b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2983,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2626)","md5":"cc39cb431a244f75298698659afec399","sha1":"88501cb3d254828dc153ff1c2af7dfc69c4ce899","sha256":"38ea9a18386586235e62c34bd4ab179c7ce02c5adf8ee2508ce39d9be127dcc2","sha512":"120270598777cc4593a0da34f67359cdb620773654691dfc116e7613bc04e408c107c3bbfb50daeeb50e71239b5bc09e285b12d8b4164e909c328d734d6ef667","ssdeep":"","tlshash":"c5510f947251daecf52b00fce13e401e225c2ea1831e4a79f6bc7db41a104f46e89bce","first_seen":"2026-01-31T21:08:57.364366Z","last_seen":"2026-02-02T22:33:10.133647Z","times_seen":67,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/about-us?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /about-us?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-aa5f4d935c023a76-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BptcTea%2Bqoi0lbisgBrOihgmve1CCFWmAJdquht7Bir08XeUIMZVDa16LiRW9nxWaoYtkmKSWEq0ixjv9n3BbAYLm9FoOZRx\"}]}\r\ncf-ray: 9c740cedbe3f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (949)","md5":"8d116fcd5e9cd02668a3006cd1bf2cd2","sha1":"4690c76b1534ef94cedf20bbc10c6d1b73c88939","sha256":"3605b6d8e813718fd02a5dabe3114128cf3cf25bf48a6b4fc77b3e4618d6798a","sha512":"39b6ec93a0568eeddfc95008ce03803456c0bb4ed029379baa4781b6d4c7daa100c5ec58c42579817a0ad8ce0b024c9ca4055ea7b194617443705f0579da5c37","ssdeep":"","tlshash":"85519e0cc8499db498c9d59971d5d7016598bf37f1b88ca8e44bdc64138f03d0beab87","first_seen":"2026-02-01T20:03:45.185632Z","last_seen":"2026-02-01T20:03:45.185632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=gl3g1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=gl3g1 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-843bf74812743f19-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=gl3g1\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16m9sWza9dh13gDVT0qayLZUS45%2BbJ%2FkmPyntGrgnEnKsXsN4JJwae25sbdkEfRovokdSf7qBtjNACTEcZ3RH3hHUdeg4pgH\"}]}\r\ncf-ray: 9c740cf0be6e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"e2d75d4fb9f994f2d1bbb02faae811f1","sha1":"2ead082da29aceb47b2bc3320177119dee103a3e","sha256":"e32be8d410e2b915be60c16950587f1a3a28c9050a07d328ceca69f8b04f7061","sha512":"45daaefa9896045fc3b3a54aee40cf31e3bce9cfd38e005430de00ba3fee85feb1e3fe84929acdcd1d131d5226ab46d7dbbb87ad55461429ba87267947196d3c","ssdeep":"","tlshash":"9c61323e120aff6c6a2b054c545ec32a635d4a36f7768e76e2fd8d72034a0245b872c0","first_seen":"2026-02-01T20:03:45.187442Z","last_seen":"2026-02-02T23:30:02.775618Z","times_seen":36,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/plinko.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/plinko.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2356\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:42 GMT\r\netag: W/\"934-19b7abf6410\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vEqjW1H7PnSon3k2hoGHTfbz%2B4inWEzaqNEqz1m%2FHdTKZMDRZZbmKPMkBhk8PocRCT1Y7DZq182Zfxjh7CFhTc%2FHbR%2FatFd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf14e740b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7d9d76919e7318a5ab3820f0b2acf39","sha1":"799ca8a6f171111e9a5327dcd6164fa7f048750f","sha256":"293bc6e6d78141aeed6e9e5a9ab93672246c8242e29c205adaeb711cd3985011","sha512":"28d4db6fe84750a2b3544e1ebb9fbff3fbf485aad0e9a904463ed8bc9c424e40343a090814bd0743dcd25220c95bb87e49d053c1b6986ed60aec3def0a634450","ssdeep":"","tlshash":"c9415db53ea2cce67145276fa4abc9084cb09bc175c63807c2e87ae4825b6184ec584c","first_seen":"2026-01-11T01:55:53.452287Z","last_seen":"2026-02-19T17:02:28.805601Z","times_seen":73,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-le-king.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-le-king.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15890\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:08 GMT\r\netag: W/\"3e12-19baced8d40\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2Xw1o2KHdtTzOg5w6%2BtGPojCfoCScgD9MVz8NM4%2BjtrWbW1rZjlmxkY0SjtCBdaTj7m5UCruejS7EaOKkawk%2BUmOOLemF69\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf1ae810b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa03e260e5f273b840e13299f9240e23","sha1":"f834d3f2a6137fd4838c161cd0ec93aacebe4b68","sha256":"0baed7e7b8ae0d3c9f85bfd4189f5e1b897585295bee50d93b72e39c9f0f86f1","sha512":"1e3261fb0276d4c2db5b42774bbe5dd446dacf6a6bf14f7babbafc3b08060b9b74702782f62048465caa6df7cf9bc158c561cec42bce04d9a9b41d909e68e5e7","ssdeep":"384:GRF9abLN3uwNq5n6frPpvMg+/5utobr3pMVtg8K/UdzIOQRXgfHHdKySnwDoo:EF9abLN3uP5i1vMgKConK6S/dgwDoo","tlshash":"4662c0e1a62bdef6f3ac95eefa1dd1e0716480848d7f3b5493dc16b2cc85e0006a451e","first_seen":"2026-01-31T21:08:57.283202Z","last_seen":"2026-02-13T04:13:07.585453Z","times_seen":36,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Roboto_Medium-s.p.caaade52.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Roboto_Medium-s.p.caaade52.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"292c4-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wj6rnwrK3T28q0ZhqbG5Ph3u5DkDMwDEIGLwXYEaAqpqTOcCi00nteDuDuXugb6y374%2FbCWanU7TDYrk8XBY%2BCpzuIL%2BF16\"}]}\r\ncf-ray: 9c740ce34d310b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-06-08T12:52:08.368462Z","times_seen":1892,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/e3d00364d13321ed.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/e3d00364d13321ed.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"4753-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75jTRPFEdLwpqeCAbmoCrIZLijVjxiopAieNDKxm4%2FHRW1sCNmqRVN85N11mb93xvjh4fC3SDdWy9wLK8%2Fxw4PYnp4Y56mDj\"}]}\r\ncf-ray: 9c740ce35d460b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18259,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9993)","md5":"2486934aebd0b00e55e68b6dfbe9d0fe","sha1":"848dbefe394be98e044928f1374fb59929c92f93","sha256":"11380db3ba8aec5597b4cde9773951510aa89424968a8c7435db112f37901b0d","sha512":"807a83e35db9c4bc646787d3a154bf2e80e386daafb9fd97ea6059fbde48bbc924847a8108bf120b524c4edccc89acd8e5139ae522a1a2655a29dc720a4df54c","ssdeep":"192:uF1HgFrAHRNiN/Rv3cGggerToWWeoedmPWo21UCS+94eNSIOEPZJJb1I+7mTH47C:YHgcRNiN/ojfoWpHmt21u+9vdmTHS5W","tlshash":"1382b6ea7282f0b197bb10a2c07f400bf2793565245d4054e7a6c8ef74f056e86a7f7a","first_seen":"2026-01-11T01:55:53.455045Z","last_seen":"2026-02-19T17:02:28.7957Z","times_seen":73,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/d2da9e44d9ba7ccd.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/d2da9e44d9ba7ccd.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"9f24-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LW%2B1nRy3%2BGBDal8Se6qxZa3juDtg0y%2FrPp3JGZGPxqr2gtJe5%2FyqPeK5modi1NQtgrkVQuY2oyFgZBSgCdoA5%2F80MoyE4QJA\"}]}\r\ncf-ray: 9c740ce36d580b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40740,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40383)","md5":"25632652a91d344165f56eaa4b8abf64","sha1":"dca754237017683fddb1ab6d2d7cb3f6b432883b","sha256":"0266885bddc7f8cb4545a8ba58432193c0ea7d157f97c24806614a1e752a3eba","sha512":"c9d3a8b0252a7e1e710444e2ccf94bbf6e4f859549d9c650bd26ba8508e86e8a936cab7c5a6be2d3f39a5442a4abb60a8c71c64a5fd09f0b3794fbee4d2907fc","ssdeep":"768:8Aco3d/bYvcIF52OZSSQcn26fGSxqoyFtwYoF5cPpT96eOmK20:8edYU6fT2WqdtkcPph9K5","tlshash":"e303b669d35063bcadc543b056265070354e15af30ead37897aac4a0b6d30ecd2af8ef","first_seen":"2026-01-31T21:08:57.261687Z","last_seen":"2026-02-19T17:02:28.713748Z","times_seen":71,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/2c69dda28e67e57e.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/2c69dda28e67e57e.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"90b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x77eCdfP39fhQguYZ1glgUvNTsM4UhLQLx1SAvlga9zLng3ntc2Scx1sRzR3GfLrHgon1sql2AlLWw8vR0Adm0%2F%2By6BT10C5\"}]}\r\ncf-ray: 9c740ce37d5c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1958)","md5":"33dc57bb9392fef432b1f5274e953108","sha1":"b98c3c6d5e93c3b768580b4dd7850384eaf61955","sha256":"6cfd34df21a22ff32f90c60f4b88b98523ade92b6a03432c4ba62b9b72701b97","sha512":"7020a27704c45175411e81c0bbb8b9c4d0dac262bf3cc8d29bde16361cc08e093d0ce2d6c4af51646777129a64c45a3618382b54e5bb80ae306cb53d1a92d945","ssdeep":"","tlshash":"b441a7d9a3507ab41cc82bf086730012618631bb72cb54b4c33989e0b6978d8e7e789b","first_seen":"2026-01-11T01:55:53.495242Z","last_seen":"2026-02-19T17:02:28.678451Z","times_seen":73,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/games/home?priority=hacksaw","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/games/home?priority=hacksaw HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-90060b1475ff7640-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BRjbBHEsAUytE6HVHilj424h%2F8rlQFu2TP3lkiUw7tXa6HckyVhS2dMXTxLapKodRa1ypyE%2FNhFwSxRMxiG6cPZbtlZtyJV\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"327c-gcFWS0hm+fvwCeKn4Lj2Hbke6lM\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cecce340b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12924,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f39c92a6ae8f2533c9614b46b524d6fe","sha1":"81c1564b4866f9fbf009e2a7e0b8f61db91eea53","sha256":"ade28fd779d63605ed0a2b8167344d95e87f985ba858156410e028548ed69db6","sha512":"7452a4ec5e4a0d0f20d84343490134db51ffccf53295d245ea983f103391f8a847b74dfac97d8c662e865a370daf2e9ea4ea30ac06207464b9992a6324512af0","ssdeep":"192:A8m6w8qSDSz2jAiD9MunJANd9Ef8JmxEPv7a29G71GDu4AhiEIT8rj8:+/Y710siCw","tlshash":"3b42bfbac4a14ce9930f2f0164c72d0ef4bd2a2330c81ca97919ee78e56dd97e51725b","first_seen":"2026-01-31T21:08:57.359105Z","last_seen":"2026-02-02T21:49:52.856279Z","times_seen":34,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":489,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=64g2huls\u0026sid=M3V4PdblLxFCL-iNABPz","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=64g2huls\u0026sid=M3V4PdblLxFCL-iNABPz HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a8b9b972731832af-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188778%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HI5bJAMAblezuX%2FFFtjmJT9h6P%2BEXiBGKYLaIH79Bo5V2%2FellHJBNpj1j7UpQP%2BiZ8532lte7APwikHo8b7PLqQ5%2FBFubf%2BJ\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ced6e3b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-08T08:39:41.393798Z","times_seen":11609,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-wild-west-gold-megaways.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-wild-west-gold-megaways.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46698\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:47 GMT\r\netag: W/\"b66a-19baced3b38\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSjiqT9PdiDHo62GzzgjXfto5ZustSOOJ2rscuHxjpt0TQkuODWzaPn252p2qe5q10bRZqzBM0mUUS2xu2gSCIqf4rS0u2Sd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5feda0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a58211fa8efedcc235a06ae04c644cd3","sha1":"31b6619a92d9617d1ae0c4ddaa179b9c5bb063ea","sha256":"81b405808439bd241e33150cb023feef63685f8a6051f9634a115c9c08f9f066","sha512":"49299100ea3ff43c038b89641c17a148fe354a739fae2aa3628034580b7694616c5f29603cee62e8d23cb49ebd1d11854281234763d71b036d53c16e419e23fb","ssdeep":"768:EkBh+w6xgnPdt88bCdziuyMYahMD0YzZbhdpXeRH9oUXmb6:RBX6xCPLbCBiN/aeD0YFPpIBmb6","tlshash":"4823e14671246d11dc7525301efc86a98feb5ef49aa2012dbfedd81f0f2083f5d9a581","first_seen":"2026-02-01T20:03:45.197427Z","last_seen":"2026-02-02T08:09:50.72743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-juicy-fruits-multihold.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-juicy-fruits-multihold.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41252\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:07 GMT\r\netag: W/\"a124-19baced8958\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaX5jyfQlJa%2BkjoxfohI3qvj%2B%2FnYJZQTWqzAIK76dVjomWXAaY%2FUp30AWZMYzJ5MoYEJr%2BoahTMAVinCM5vwIfNfwHTxw2RZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fee00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e25092f34bc86e9371ecbdabc6e8b96d","sha1":"195acb66e41731022e0a7e63a537f20470a22cec","sha256":"5ce147a813dd60dd0908403ae2517cc06e96d201694fdfa8996661345e854b05","sha512":"bee619835532d0df3b5a3fad38a81ee7162d8ff6737bc896f4e27228eaa60ff00db3e6679669e951fd0f0dd800978aa0d29f53425d9feff3a67c53ec431a94db","ssdeep":"768:smwratPS/TuYgAE7R2/u8nBp34SdHmleruqTgvFvPtumm7cf9+WGLi:smwutIdOodd6qKFvPtukfQ9Li","tlshash":"bf03e11996516a03ec1dbbf910fca10aa7b30e9cdf894b9976dc4c1f5b4003b9e9d14a","first_seen":"2026-02-01T20:03:45.199219Z","last_seen":"2026-02-01T20:03:45.199219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-frkn-bananas.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-frkn-bananas.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14954\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"3a6a-19baced79b8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pFlJiK96oDYSNA2M1P7FRhOavkyg8GbcfxiAH7mH3vl%2BHYIgb%2FRQo6ePadhGeiiNNBmZEzwM%2BQQS1ESkFTauzuwGYG7gl9l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf41eb20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"51d9eb7472ceb01ff4c224a7cd26e810","sha1":"96e49ce0efc871c40a54a224a3fe2f89000c8edf","sha256":"e40eca3bc17c166a2823892ae0f555684eac73e8529993f15ffccd0bc424b42e","sha512":"34d074885a9b3ac9a65a92fe28204c23278487ea27664a9baab045aa3048806b3dd5886cd74efc71e5aa1a7534a4b8e2514dde1a0b5d60f6b4efc0afa5773d5a","ssdeep":"384:p14LUdvwT1xgpqZJobboYGTI8nsHOhVYjBkDZ:n6op6osYsIusuhVYjBE","tlshash":"f662e16997df5dc683b9bf40281785e06f03244727ef657a9f1e4ad9a0770cb838530a","first_seen":"2026-01-31T21:08:57.20774Z","last_seen":"2026-02-13T04:13:07.583486Z","times_seen":35,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-book-of-tut-megaways.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-book-of-tut-megaways.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34538\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:44 GMT\r\netag: W/\"86ea-19baced2f80\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSJ8bmgvEI1PPBIrDcub%2F2zAaJCvd57%2FkzwsQriHJM8oLCamUd5veHPOor5RZKHqsWjkNmb4j6L5z105RjVNnu%2FIfcESBLuf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5ced30b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd5ef7e62ddc03a9c718327cc5e82d76","sha1":"5951db5ef95c4eb30a0d5d6f1943082ff95fe6b9","sha256":"f6dd70a0005e8c610d40fde4f0bf368a7363c2cd7ffb622156adc4f81d5998e6","sha512":"fbdbd66be445d261503f3a7057071eb883e688a96537f95680e8d983f072beee27d769896c1dd51b9b2725ab3d1f39929f176f1feaaa3b2dc87ac02cc0f71a7d","ssdeep":"768:U+keP8aQk8l66oRK1J5yTh5wjHFx+xY5ODCIyo9ckMb:Ma16oRs6h5i1F","tlshash":"b8f2f128364e70ceb9f6681fd7996b394112e5014f2b4eab3d0016c637ac6f1b1ebc60","first_seen":"2026-02-01T20:03:45.201988Z","last_seen":"2026-02-01T20:03:45.201988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/vip?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /vip?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-85f63b85ec469bac-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/vip?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5zy0W%2BAXLNrerxKPedXk5M5tNHaMG2HafTTHhd84KnN1t4KAiQoQzLdz9UCVzbSw%2FE%2F4elgLYednz%2BbEO5kOTGo%2BYUxIGyS\"}]}\r\ncf-ray: 9c740cfa2f560b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/providers?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /providers?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b85c306e6a0d92b0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/providers?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duxdYnD7iNuxO50kFVet8ONZar3MXPcAqmsxUSgb0ZQFs2cRN%2FCKrcohqErNPZ7h%2BnGpsFRFqDt13nUi%2FsAW%2F5OOGmpAOjWv\"}]}\r\ncf-ray: 9c740cfabf610b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4b5fc2a2cf150c41.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/4b5fc2a2cf150c41.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"734d-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoRXD1DXErJWPv4j6X%2BdeFrxWHb5cZOf1nhKIqLNVovkTjpeft3Yc%2BiDX%2F3N83MfM%2F7cW%2Bpd4IWaM3QrWZ8B3vj71WADDDr0\"}]}\r\ncf-ray: 9c740cfbbf710b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29517,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29160)","md5":"9a2db0f51ceee4b64dcf2f34b7cc5de1","sha1":"9d13515ac8e3613937c7e41e704ff52760ddf473","sha256":"3e316fdf81283e8d0d6e95f67225560ef3c1c3b33230192de20cd9a9516a75f0","sha512":"80ac75dc3f6084d84660a5bc6fed6ae94440a6018061ed1fd18289c226952ec56b4790a8d42dc197cb5277edb1596fe26baeea78de76d04cb07d3f621a6657ee","ssdeep":"768:PfCxyEdRqNnKG1+g3fA1SjjDrxEBK8mO2V:3GyEdR2KG1FP","tlshash":"78d2b66050457abcf56708a8ba6dc40cb11eae6cc70fcf18b57c7c253c5a9816d96f93","first_seen":"2026-01-31T21:08:57.196019Z","last_seen":"2026-02-19T17:02:28.856281Z","times_seen":71,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/4c6af75a4d489639.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/4c6af75a4d489639.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"d7a-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HwX8c8RjSwwQTzitGWbtWb8to66YrHtgKCkbdnRag0UNbK6m8q7f9ZH368hv8F3p0wJEFjO4MywFeXs5DtPjSdW59nsr4lj\"}]}\r\ncf-ray: 9c740ce36d590b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3093)","md5":"c1ffd2810057714d095867acc45f47ef","sha1":"6eceedd6553cf3063278c27de1aee25bb0667c36","sha256":"9604e0e5b4711c50c013e5c92da26573dfb72ae0ec3b83cb53ed75ea761a2d4c","sha512":"d913954244730850117b7c5363093e05714597040db3655885e941baf6cf66fde9ff661a6b0d1d0c9f8397e67197b0c0b7a725e1f85142d9d8e1ece11a25efcf","ssdeep":"","tlshash":"6a6101b6239433bab4c00fa442e6702611f53a6b30cf5174dbab4588fc55ceb907a55b","first_seen":"2026-01-11T01:55:53.535061Z","last_seen":"2026-02-02T22:33:10.184641Z","times_seen":69,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/33f100802e817e42.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/33f100802e817e42.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"21e6d-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5nCWq1tu9MwDOF0bHVqidEfnw2M0qh23V8AK5itCO%2ForEvCb0WFykDPt1URV2gtFsFX0ijE8p%2FU%2FALywIyJK1c777az9ttb\"}]}\r\ncf-ray: 9c740ce37d640b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138861,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62859)","md5":"debbeb6cdb7b1be6de8c93e038673ebc","sha1":"1f4885dc43cae313308c1cb103cc4c5f5cc1097c","sha256":"df401cb98f64505017cb9cc89ee34782afc0db5febb7f4102c2be08286280b3d","sha512":"5e25627b862997c1bbd192e9c1716099bb6486aa555eac7d5e37c756e2473825a8a670cfb751b9c5a5542b01b98eb6bbd3b9ba9ef9c4bcf786cec5267bc60832","ssdeep":"1536:UAnRBc9eym0bpa/Bh9QpfBuhCVKewjFSqE4eRlUxwugwoL5CLOrObU5W/Ndh9w2y:nnzc9eym0NN4CK7FEObU5W/N6yDQXD","tlshash":"e6d33ca53300b83599ef83ffe05645a9f72c2709c1099024f97e5dee232caa57157b3a","first_seen":"2026-01-31T21:08:57.287659Z","last_seen":"2026-02-02T22:33:10.157366Z","times_seen":67,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/static/surveys.js?v=1.318.1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /ph/static/surveys.js?v=1.318.1 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188764%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\ndnt: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 104.23.239.128\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4Q667GwJQAOu25J2GivpNUWkbpntD7dGQeQ917pNgjaZMsST9u27Gi0OZeD8DqFso6%2BTWqC5s7xOlBbHRL%2Bi8NbBu5X6Frp\"}]}\r\npriority: u=3,i=?0\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/surveys.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\ncf-ray: 9c740cebde2a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88854,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/?_rsc=9krwz","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /?_rsc=9krwz HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-972841f21499aa1a-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design?_rsc=9krwz\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3p9ktc9iSMKIntuPsCCxialJC0NqnpfKRF3y69nGQlIKXyLSrLQhst2CxH2pi3k%2FBfl%2FE6SfacGTMMS5BMM4IKRWKK7WkLZl\"}]}\r\ncf-ray: 9c740cf44ebc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"e2d75d4fb9f994f2d1bbb02faae811f1","sha1":"2ead082da29aceb47b2bc3320177119dee103a3e","sha256":"e32be8d410e2b915be60c16950587f1a3a28c9050a07d328ceca69f8b04f7061","sha512":"45daaefa9896045fc3b3a54aee40cf31e3bce9cfd38e005430de00ba3fee85feb1e3fe84929acdcd1d131d5226ab46d7dbbb87ad55461429ba87267947196d3c","ssdeep":"","tlshash":"9c61323e120aff6c6a2b054c545ec32a635d4a36f7768e76e2fd8d72034a0245b872c0","first_seen":"2026-02-01T20:03:45.187442Z","last_seen":"2026-02-02T23:30:02.775618Z","times_seen":36,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/bronze3.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/bronze3.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6220\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:53 GMT\r\netag: W/\"184c-1930f239f08\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1M8%2BlA5fS2jMpWIpc8C4%2BJXMe9GvE%2B%2B5lUeSEOocd%2FkHT7xmlFcc2Xic9dLeBIi7Nx9eM9M9NntsdP1XEgfwGGOKfyrvemcR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fedf0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f56b5ceebf9db8e4bc2f43d20705b7a4","sha1":"3a0f8c7107bdacb95ac1205f247f1e2289d7ff7a","sha256":"6927df57077ad75918a5ee983f4958403e35feeee586f1fe6a2e37d9c290349a","sha512":"ad6f47faea2649b779d896be6172e08ee35622dd5a096c27e1183df06a83031417c55082fe49fa684a37598e5af554c7be176fb9437f69b8a83313d47bd6e0d9","ssdeep":"192:YIajPDawjYKw0w+GxgCSZWHnXETl8RdJrPFerpV:3uPDxjYKW+GxvSZInXeA/rN27","tlshash":"08d18dbb12c6ab48091c26d6161c7e9c85f53ec0356ecf4dc032a85fe10b8f17a3864a","first_seen":"2026-01-31T21:15:14.958629Z","last_seen":"2026-02-13T04:13:07.687567Z","times_seen":38,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/blog?_rsc=i9can","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /blog?_rsc=i9can HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a2fec7eba788d5a8-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/blog?_rsc=i9can\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UEUPP8UnKdWmnFzJ1pvM5yyWC%2B2BBeO%2FZhZaNO6TOlv0jY6ZEHWGKcwucfIcHWYyXmzAvfXknuGsZf59v03sZatmsSBM2Q8B\"}]}\r\ncf-ray: 9c740cf8ef350b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220253,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1621)","md5":"118fd84d5029f4f2791e8a850db8e782","sha1":"bcfdf00068336969dc67ae3339144cfe3dd22673","sha256":"d8d1f6196eec9e4ece5ac7e4e870d7d82bbca8203d8390383db7b1beafd6f434","sha512":"54f0b34c7ba1d596a25bad77579ba8f584a61fc5073ea441f50e715bca1b28cacab1c0305407cc63bec18dfc64572f7f19766caa0d997c40bad38d975daf2a65","ssdeep":"3072:YyI2liLaJ0X346Tmcxy21qx8+ba1BAZtbD:3Ja346BMaIT","tlshash":"c7242a267b1c31b007f3056b367a32ddd63a9014632665ede9aec06c236a33d8736e5d","first_seen":"2026-02-01T20:03:45.209126Z","last_seen":"2026-02-01T20:03:45.209126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"29144-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSDawfyptU33Axa7OxtQd2qYMF%2BO%2FfnmqBMVYQcxEtvatgJq9QNhDH00SW04%2FoE8axQDhAh9KNM0Ewgfj6SOUqSt2NBZ4nP3\"}]}\r\ncf-ray: 9c740ce34d320b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-06-08T12:52:08.369562Z","times_seen":8237,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/inout-chicken-road-two.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/inout-chicken-road-two.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21086\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:21 GMT\r\netag: W/\"525e-19b7abf1208\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0FK4XoYr2RN3FibsliGAOZ0hl2xelWrhsIx6qRdej2RSyf3NGysupMEFhGCNr38vk0mjD5Pafgn70XX8f3RW7xwWPBB8wpn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf15e780b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c51819308d47956aae4f440b78a3738","sha1":"dfcf53c70c19bc4b092101b2747347e03914810c","sha256":"d24c9029163fcdab092d967bf9ca0e92c0765f65751d17857c65c66384d575f9","sha512":"8b5eddfbac12e44eed0c84d72bdb1236f8b012f2e8cef45e59c6c64fe63e0f165f60f774b1f7bfa532ad9c68edcd0a9b358bad2ff02ccd014c1db2a9e8e422ac","ssdeep":"384:ovnk0XgBvzmDivCF0nWW3N5p9nuW9JsnvagAHUeVbCKwnO4KtkP2N0D:oc0XgBvq0nWKYKGnvQt9C4te2N+","tlshash":"c892e144f1c681192f7622dcbb9edb86d5c085922048496ebb7e1943c7b2ed583a478d","first_seen":"2026-01-31T21:08:57.30618Z","last_seen":"2026-02-19T17:02:28.739386Z","times_seen":71,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/home/promo2.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/home/promo2.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7574\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1d96-19b7b5da3c8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dADrF3nbMdiRnHbke5JHqYFGXljvExGWptVlaJ9H3drL0%2Ff18gPUfNmuhWPXVwP3neZEMfdFBrZfzGbzBOL5iRUc7ecTF0ml\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf3fea70b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3539038ae01db5382d54a6c94823d21","sha1":"a9932b694e2b9a4111043fb5c72af4da83d71ac4","sha256":"db04cc3d02cdf2846d24379ba9dff05f55bd367222be7ba31e5708adf7eb8141","sha512":"189bda25bf1a096b42a402efc0cfa2d6d53caa3ee850fa2d9ac939bad17e2cd9cb1e9039011a5e66081fa5ce1c9e82318c2e22eebdac349e8c629fa3461678f7","ssdeep":"96:88NtxuyL0zqjkZRMK+UmtCPbSMRPHM0EWuQbaCvwZkLHFAP8jLeG5J3wLHH0:PN8ujSRQUASVCWuMvwCTFosZgo","tlshash":"f5f1c0720a6d0a7f7a0b4df142c9fe92d107788527a99d451d479fd081e55de07e042b","first_seen":"2026-01-11T01:55:53.552654Z","last_seen":"2026-02-19T17:02:28.854451Z","times_seen":73,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-duel-at-dawn.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-duel-at-dawn.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34038\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:47 GMT\r\netag: W/\"84f6-19baced3b38\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pR7p6w4%2BUdwLRoJDySChmUIpXFFEeRRKOq4obg4LlZU1C3K2KKKyz2H5NeSliEHcbWk%2F6Y5pj8Xx4%2FIe5ltoPD9XenCTZrVh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf40eab0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34038,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f81aa55b46f91bf48a323e72d7b1f207","sha1":"d07c2716de2f647e2a5fcd794cbb32436e571471","sha256":"8ddb824c0ddf14a00f22be640df614419ebff7cb11ec484530867e44e15ab190","sha512":"97270450f34386dc5da0d95480c0f55d129cf50408a87139dce12a6457a2be56e4834bd37e37c8cd4491d984c69eb2ff3908f4973ee67626adcd47081f39267d","ssdeep":"768:sK0PnSJncOts+g6x0vct8INoEa1+Cpx38QYPs51sXDGh1dCW7hwQP7rMWkQ:0anc+ccL+V1+Cpx0Ps5iXwTwQPXMXQ","tlshash":"23e2f17153eb6c30d44496fac09898277906c487d08efb639c0ff828e5e51bac1bb2d8","first_seen":"2026-01-31T21:08:57.226909Z","last_seen":"2026-02-13T04:13:07.630813Z","times_seen":35,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-wishbringer.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-wishbringer.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29050\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:56 GMT\r\netag: W/\"717a-19baced5e60\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aB8RI320EDVdr1dd1WzbatHnn6Tdy%2BxFEg%2BSI9jWOFLH7BxtY0OlLnOKcWfju%2Fl69NDd15LNSWI7SX247G7NN4x%2B58J0QVh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf40eaf0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"97dd36063786f0229bba6fea6af1fdcf","sha1":"565b435f367c40f3bf75550eb20198ba03072b46","sha256":"65437ddf90335b49c301a8088ee7e659c5b588ca1e50d4ee4e2db110314eb46f","sha512":"ea8084afaa68a4844c478a3e3814abaf5ecde65ead4caf72cfc1629d2443fb7f76d15f4cf09da763659ce1c715da21528ebbeedd2e07bf615bba3a262498b612","ssdeep":"768:i/C5GiJAi7JOVneCq3kWF1ggP9HMvqgR2tqrmK:jpJAi7JWneCq3x1ggZMCWj","tlshash":"71d2f293a78c7605a16c81b53d9a83d5882eed5603b96435b4ccec3e63daf0ec541df1","first_seen":"2026-01-31T21:08:57.320111Z","last_seen":"2026-02-13T20:55:00.751116Z","times_seen":36,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-fruity-treats.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-fruity-treats.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23168\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:42 GMT\r\netag: W/\"5a80-19baced27b0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rC%2FGbgUtpiBMhXd3rKlJUnXP11Vnc4fX1%2BnFo7GI5mxb7JgUDM54XjML4xwLOSqiao0FT4cU64tzQnC9yDkA7WFdFLaVFHF7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fedc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23168,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6971ab06758e1a57dd066d3b866686e8","sha1":"39e7cfa075bff11843edd1dc745fe84ca57d71a5","sha256":"ff0c877692388aa61599d0e12ac12803d2bed77a1d847557cb779482de3f52e6","sha512":"c7e1c2cf1b8e354a92d75ee428be0d0444e3f04f411ce235dcaa39fdede791db83ce3862fe06ce917c15d955b4a3ef12de2ad64750feb1c97cce9615d4f78b28","ssdeep":"384:oulqoDVWGayNu78QZF0mdpNoRlq/Jfe7YSaIBEnSBZZXBhrdZo/ffeVJDL5OyZ3u:JvDVjNuoiHNMlq/ZWUnYZXBhr2f2/L52","tlshash":"16a2d070acd2415ecdc8a3e3f967585f49071c7c80bac2a52e6a419ea8b17ad3e83c04","first_seen":"2026-02-01T20:03:45.215724Z","last_seen":"2026-02-01T20:03:45.215724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/ce44054dec8673d8.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/ce44054dec8673d8.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"2a759-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCUGGzopbeG%2F9uEtzajU5HkZh1L5r72KzgEDK2upJX7LgKEwMkhuBpa5G6ffdn22hVmvqAkSbapFhuyGg5R%2FJ4ln5GTY3p9w\"}]}\r\ncf-ray: 9c740ce36d560b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173913,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bde39edae3431bfd62768b8daea510","sha1":"9db768e745799c7b53bffbdb618c2263ab3557ca","sha256":"00a87cb86b607e19e592958bce89d185c75348ab44a92c12981c1b643ec1f5f3","sha512":"2da1e992c32123c7bf657c5e5a8e22f89aae2ad011483788ab2a009ffacc9a5709284f624c13cde721c732cbb1fe2337e0c40541499b51687862ff2e896ef008","ssdeep":"1536:BSUFcXpf43D/mr5hTIEdjDjJTob3UoYq06KgVH3TgTUcvJsgqzgx2/xWCSqlX3mX:BvWXpfsTzj91E2/DSqlX3ta","tlshash":"da040bdbb779d02249ed90e5d0360103e33a3b4e5548842cf25eadce359d94aa27bf36","first_seen":"2026-01-31T21:08:57.252675Z","last_seen":"2026-02-07T15:13:58.776301Z","times_seen":77,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/438b3221d8ed98ae.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/438b3221d8ed98ae.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"176b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZB2QeaZWJnRPm7tbih%2BX%2BDrAWXSyDx61rMc7WbmHP8dlW7eUmZB2LTFnVHUmUU8nTatab6YJOM0m6Tx89Q6mPR4oRJSQXpo\"}]}\r\ncf-ray: 9c740ce36d570b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5638)","md5":"776e994809ee498e36929c1369e977ae","sha1":"bb87b2a8cad358a2b6b54008384ada9992d775f6","sha256":"d7ed199cabbda4d46f786e339ce99c16a7127aefad702bfc2e779527413fd749","sha512":"505e54da0c580cb4f6d9b2143e1d83e793f10296d84465dcba72442c15ba4bb2fef4385bf203f10566f6f2c935c91faf721172b36cec84945fdfd717b3ed9df1","ssdeep":"96:fWKeBCnhISV+FdytrbbUp+nOliRqCWj8HpQd4roafQBoabmj88p+qjFfww2R+Rg:fW03V+Fdwbi+OMLWjwdlpli9R+Rg","tlshash":"07c166e7b7c433a1904d437052237112b2be39bf33cfd9a58aac85c4595d84ca62fd8a","first_seen":"2026-01-31T21:08:57.243873Z","last_seen":"2026-02-19T17:02:28.633034Z","times_seen":71,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-mayan-stackways.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-mayan-stackways.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58820\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:45 GMT\r\netag: W/\"e5c4-19baced3368\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVX3xiQy%2BNmxIBtslLkUgPUl%2B31BmAeBVccGAs6xx1Z1Byvz5rRHdRMeqwhLjprlpA8XD75%2FHzDb%2B1XEbZoRXNjDXiJUKpOl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf3fea90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4319e2af5007f7e5816fc39329e1c804","sha1":"faa25f00a2ca68e9dae4256e4afb9be5f453990b","sha256":"7f48a539615aa9c3ca4f4ba2dadfe8d8ce53edec0de058b673a99ee5cfdf89a2","sha512":"5730a594b4db3792b84efb657e2f87bddb1fc9a01bc8959aef9aa7ba8234bb89f40cf1f127f8e3b8d77e9360d92fbae726927f6722b626481b3f8317ce1386a3","ssdeep":"768:6CRzaBPItsHBp/Vo9Kscl2wm2CiyB07cLhjbPPGpeEO/VRgd6f2g041i+eQZz1Rm:6otXYDl2XIkNtPP3/7N2g03Ofm","tlshash":"fd43f1865b118170c6c9b77a20f49841f8ab0bf4ddb5821f7e1d8c95cbb88d94b1f786","first_seen":"2026-01-31T21:08:57.203717Z","last_seen":"2026-02-13T04:13:07.571034Z","times_seen":36,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/iron2.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/iron2.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6118\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:06 GMT\r\netag: W/\"17e6-1930f23d1d0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tiYyp6AI4bppG3ZGCq2M%2F45kF5fOp4llEIkfIDo8%2BNVEP%2FUaxWUK7NAPal%2FQbPuI0Z%2BCH8uYOJWReX6TFzLux8SQY53fXYs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5ced20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d28114b48ac18944215523860da3a5c7","sha1":"28362795f12361cc91e2f6e07105b8c9fc3edf09","sha256":"5dc83996a07a764a4857682d8787b8227d5459b226769596d67a29c678d16c99","sha512":"d66a50afbbab7f802d7ee838a865d1dc0e8499b3ea3c83f164677f43fb503d35c85dde4c8b254aad28b85c52bcab62624bc608f31e9d9e4c7d2b0bd89687432e","ssdeep":"96:WyAJFk2Vi06XAhJK5gi6XehC021eJoeDO5uCuKSBtQKdy6J3Dw/+Athr2GWho:YJBVsyRXcC02IdQuU6Ji+mrmo","tlshash":"9fc18ec362fcd24eee805cabfc32418ddc14ddd24e602bba5d8d9d006525e2e3a1984e","first_seen":"2026-01-11T01:55:53.50367Z","last_seen":"2026-02-13T04:13:07.677692Z","times_seen":46,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/favicon_2.ico","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /favicon_2.ico HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jan 2025 16:18:38 GMT\r\netag: W/\"423e-19446b5f730\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VB4yJ0ob0jX7sddHtKXqrpI5iRussqx%2BR8sZwT7O9cwsS8hvgUkZjsNbe9sOCWMhNEoAT0ao3HEEtwQ%2BMbmD2a06gzS8iKlG\"}]}\r\ncf-ray: 9c740ce6dd9e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"862625c18a78d2a3bebb3990ed8423b9","sha1":"8aee24aec86045963d43ece03ea0c14bf84db605","sha256":"52d8c3814a66882aeb937eaf0bffd819d7eacd69c955f34627a2753a645f4d76","sha512":"0ed2e082fbe2427cd903021e90a59106984919b00075bc99e49ab738a87204277b5353c14299c920755365083b2ede65436c0382f84a5acaa59495c9f36f0373","ssdeep":"192:oTEdnrvnSuNIa6yxthZ5Howi4lpoIhaOSvE+11:oMn7v6afyEW","tlshash":"5872dfedb1c30f87cdb57af0e12686414b620c7007587422617fb2abe267596ba0f94f","first_seen":"2025-03-15T18:38:34.505366Z","last_seen":"2026-06-04T16:54:35.351142Z","times_seen":92,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/mines.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/mines.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1734\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:17 GMT\r\netag: W/\"6c6-19b7abf0268\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36ZTgwMYscIMKolAbtm8hfQocokffEzHZb5txkSmj7O5HnFqbtAuwCx8%2FdmicLpBXkYkh6NSRZ7HPjGTPrN2qWr22LJ8kzeL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf15e770b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fdb901c172b335aa0c59289d0ca1d53","sha1":"164b3ba4e8ef8a7f10d158a69f9f664e63085c6f","sha256":"a54b22a7226f14e4f83d960f2e8ae53dda7ba0ebe49587b1209ff36898e26bff","sha512":"633554002826f300bb24d88d9de30388a612c4f9afff50dc6aade8996a8dce578e4c7d0a98ae474dc83d1bf2ca0bb86a11db9c916f3c9d515b7a11ae414f7c4d","ssdeep":"","tlshash":"bf310b3e015b206166e29b6f633d17a48dd505c98eb3ceb4244fcea2ac14fd1d560f11","first_seen":"2026-01-11T01:55:53.426802Z","last_seen":"2026-02-19T17:02:28.799021Z","times_seen":73,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-spinman.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-spinman.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12860\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:58 GMT\r\netag: W/\"323c-19baced6630\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75OmLajsxwSazxioIHtufgTh5w4ZKwYukr6eUAbYbt3gTk1s%2FIeVDsHA2IdkTvHgAdwMpFbsXY9yJvtPjbcT%2BIbgdfNNQEBh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf1be830b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1f8686aaab475223367020ba01c943b","sha1":"4995717b96bb1c79e414c305ed023e245fab5c6d","sha256":"d3a7e67600eebc8ee7ef0e757a03fa075353d5cc055a26e7859702d1ed1d7f9e","sha512":"cbb4755da0d75a2064ad02727845bcc0d0484154d98cac0fb913e30fa39b3fa25c12c605cd0903fc79bf74dfa4c8abb36d3ee2ea6cff8dc361c2512c99e3c5e5","ssdeep":"384:qyHZ1XyxAIMOPl7ISdRdtgNkAGTZSiMYxXQ3BTJ:tyAIMO979RzgN/GT0KgxJ","tlshash":"3242d0f64caddc199f627068b4b5886101f534127e4c43f75bfb9a330eacda92098b8d","first_seen":"2026-01-31T21:08:57.33189Z","last_seen":"2026-02-13T04:13:07.700976Z","times_seen":36,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/group/slots?_rsc=11jlv","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /group/slots?_rsc=11jlv HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b033627cb069f1e2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=11jlv\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brMyhtZvG4tw3M5euPH0eTa%2BWBiNSLDJ0VHTmpj1N5R4NkaQ7AJDXXg1nz%2FQ4Y2ClcDqt%2FwCy9OILQfSKTnsia68gL1feyzs\"}]}\r\ncf-ray: 9c740cfbbf720b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/09bcf53934cf48b9.css","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/09bcf53934cf48b9.css HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T85tNyKifPJo%2FxciTsFHAFH1w9pmo%2F4USHbV6tUp4jBbmmOOXBfb%2BkL1AJ7DrpSZkifCBR0LVbqMhcFBAN1WIPtLZTzYPZgQ\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"93-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce34d360b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"4f335c221d5e283df96fc6b4a2e8775c","sha1":"44169cf280b27a325f85cb86c9c79f26ea4807cc","sha256":"75151e853588fa94ddadf82b7e4442554a7cfb03eb34dd45896004ffc7ea5c9f","sha512":"7683594dc8582aeb0af1fc6105d9c25c31638dce4a62cc3ef14f140bf1e4ffad6ee7b0aab3b4c613f05a575d384acf404af28b75679a66a5dcb41773640dd3cd","ssdeep":"","tlshash":"e2c002cc938927120487a6d23aa0e5e1c13ef1c1bab984cd21a9754ac3466550186646","first_seen":"2025-11-23T22:59:50.462528Z","last_seen":"2026-02-19T17:02:28.669617Z","times_seen":75,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/fcdabb53594fa7cf.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/fcdabb53594fa7cf.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"26d97-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Cl%2BsVXLR0Y5RUH8yc6Sjya5O1iLoD1q%2Bo326d5fjPa6d%2F9HJzFKgcZ3ucxf4noUo86n5BcdiGtYG7DJal3W6Iqg%2FBEo3cQi\"}]}\r\ncf-ray: 9c740ce35d400b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159127,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40218)","md5":"dc35eefdfb561070a6c3fd395b8b0e06","sha1":"0e99f80f3609455f7a1d0de1e932575bc2931551","sha256":"6df913cdbb4364f61f7eb112cf23d1b40438d47fe337266bbc9c0acefa387e26","sha512":"52c394db82cb28e8d4376c834989de504542e9d324d5df43688f5c03344a4388ec7328597a3396e7cdeeaf4e9384047a52d812771be24361972c3dac98d90cbf","ssdeep":"3072:3LSLiYawBqU4ebR8+K2k5tx9FpWgJlg4P:bSKU4ebR8p5txxdJlgW","tlshash":"18f33aaa33a725334be9829ea4b51200f3365658604e043cfb7c9dd7296888b71f7f75","first_seen":"2025-12-31T07:43:06.450662Z","last_seen":"2026-04-28T01:10:54.191549Z","times_seen":185,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/f2c075ff8674f48a.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/f2c075ff8674f48a.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"a16-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13rmtSIcJWpcWgXVUoIznxZM%2B01VN3MXaj5qZKlzBR1HKe62x%2BWQvFsqRNmIAqEmC%2BEn3rS5vxN4wDA2Og4we4ssRvoPaVGr\"}]}\r\ncf-ray: 9c740ce37d600b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2582,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2225)","md5":"3e91325fdd36d18a20855a2c09856311","sha1":"caaf5398f37f8edb868296e2a35966e9fcaf2261","sha256":"b85d8f984c98d529d06bfbb6a1d848d9d7f07a28e6205538a10b8f6bd41d850c","sha512":"29c916de66c4f6b31a883bb274035c052566890e60b5d3c0e2414787fa0b80ff98041a3942f19505466c2b4349bd406c3237a322f583ade569cbb6fa988118b6","ssdeep":"","tlshash":"005164e32b4832fc28ca10681e6b6113969c753f31cf90a49a4cc5f4a6cad88f26345b","first_seen":"2026-01-31T21:08:57.26314Z","last_seen":"2026-02-19T17:02:28.785235Z","times_seen":71,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/ph/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769976188194\u0026ver=1.318.1\u0026compression=base64","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /ph/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769976188194\u0026ver=1.318.1\u0026compression=base64 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncontent-type: application/x-www-form-urlencoded\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-805fd8e9e2af37ae-0\r\nContent-Length: 277\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":277,"data":"data=eyJ0b2tlbiI6InBoY19UcEhBQW9jS3ZlRUlIVTJZZVd4S2Z5Z0RvRVY3TEMyYkNxNG1FYUQ3bHVOIiwiZGlzdGluY3RfaWQiOiIwMTljMWFjZC00ZDFmLTdmYzEtODg2NC03MmE4YzUwMjYyNzciLCJncm91cHMiOnt9LCJwZXJzb25fcHJvcGVydGllcyI6e30sIiRkZXZpY2VfaWQiOiIwMTljMWFjZC00ZDFmLTdmYzEtODg2NC03MmE4YzUwMjYyNzcifQ%3D%3D"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBOO%2Fq1Qw7zE9kKjHhd66GcqrlJGcEWV5QtW3xBghmgLCvyxlVEptKn6tAReUOaW8Ghm%2BWg3Ey5krY1s0dXR%2FpaSEeFfeh%2BE\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%7D\r\ndnt: 1\r\ncontent-encoding: gzip\r\norigin: https://vuxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://vuxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-805fd8e9e2af37ae-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.47\r\nx-forwarded-host: vuxwin.com\r\nx-forwarded-port: 3000\r\ncf-cache-status: DYNAMIC\r\nx-middleware-rewrite: https://eu.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769976188194\u0026ver=1.318.1\u0026compression=base64\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://vuxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 31\r\ncf-ray: 9c740ce84de00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e1f002e3c0bdf8bddb13e881ea186525","sha1":"3f40eacba43a7d582f2d4b5cde550c1b9990d251","sha256":"a71ea154c84f90ceeb13b5d678dd2ee0e85f2dced114f1b4feac07e37c706a32","sha512":"837dfe7cf04c8e0b3908ec2c47f623832c6c6b5e5a60b6261edefd35ca0df168274a8db47336bea3ed2ff7792814d1db370fd1d95f8ed2c541b3e2f895ba0c59","ssdeep":"","tlshash":"2a21f13ead60a97a958ec3509ce8be424fbe133711645c04d9894a2813e72f9b667c27","first_seen":"2026-02-01T20:03:45.226009Z","last_seen":"2026-02-01T20:03:45.226009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/terms?_rsc=1uh31","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /terms?_rsc=1uh31 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b0444e0ae2c936c2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/terms?_rsc=1uh31\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: MISS\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUTLlVz9gNFc%2FrlxSqjQ1NA%2Bcz4bygkz5hG4%2BAngahpYJOLqpDDU0YDZBrCPvr6EOahPDYWiaJWsC3jKULAJROKTS01%2FrbJn\"}]}\r\ncf-ray: 9c740cea8e130b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (943)","md5":"6ce3bc3b7d947ab944d8b6621f238853","sha1":"6a9df3e10c1066785730b6f6a688215b8aabf597","sha256":"7d483e320a2c371969b7f8466b3de0389538d1046ae7fd8167ccc89f409ca6ee","sha512":"40b4f8258e68663a487b6620ab06d1f828b037fd9bfcd7abd2d305993e1141e6b9c606e4dbaf2f18a744e5ac8216b9f90cab6a6d7edd04f4bb87682e03e80862","ssdeep":"","tlshash":"22519f0cc8499db498c9d59971d5d7016698bf37f1b88cace04bdc64128f03d0beab87","first_seen":"2026-02-01T20:03:45.227154Z","last_seen":"2026-02-01T20:03:45.227154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=64fpr7zx\u0026sid=M3V4PdblLxFCL-iNABPz","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=64fpr7zx\u0026sid=M3V4PdblLxFCL-iNABPz HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-8afeeed26c5b621a-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhQ3hWXUtWy%2BIgEB%2F%2BXnHXAxQWTPTs74yd3wQzRAEaUlbZiamtYurUjbPK5MNdBnq0uwKu3rnaM7fLdnawpSLFLMBbdnt08f\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ceaae180b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7ae5a5eb4220fe2e30e8c0469491e602","sha1":"e2faf7815f94f25863b7953f273bf7d3ddf69bd6","sha256":"e79f0f0d0ea741aabf20203fe4a0c5ba4a81fd811222f9dda854fa52ac8040c5","sha512":"ec5f4c57ba32a6b4f8b8fb8273cc72228bb3fd55ca7c9dcd4da08110a54abc30e02af10837220f1d3c2a8e0197b925fef5dfc5198bc6c90c1e7fff4a8e7845d7","ssdeep":"","tlshash":"95800023b880300800b020a2b2b0823a0002200ce20022ef28ea03022cae8802880a20","first_seen":"2026-02-01T20:03:45.228542Z","last_seen":"2026-02-01T20:03:45.228542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/home/promo3.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/home/promo3.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7782\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1e66-19b7b5da3c8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxmHgH%2Bt0dxsq9kte7FoiSnzpFTJ7FehpiMPiQ9c0baJVLnkLYqdEye6LSok3GJOZ%2BCm%2F7oegGMLcxo825ypbJfy%2FxDQNKz6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf3fea80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ede4c081b4631f67918ea29b84df3ebb","sha1":"419615db1061840c37e5bc5bf4081947bd5148bd","sha256":"33b256735e64989f6fcd5d28bf295e6e6d47ece66be5b9a43a96074166d74a78","sha512":"8b15972f0e61d08d22fe0dd6be6ac61b42f39d96a6f620ab8c85df5040f636f738bc9313c8614387020be54106d78fd715410ffe63db26f748b68ed3edf80e2c","ssdeep":"192:jRgHZlmBzag9JWBreRAFQZBSRyU3LZvjE:jRBzagqdyPSEU3FE","tlshash":"43f1ae7c0696320e81a9c82159f0b0fd0a993607cb42435cddecbacf2e99f4851c1216","first_seen":"2026-01-11T01:55:53.533126Z","last_seen":"2026-02-19T17:02:28.691621Z","times_seen":73,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/ranks/iron3.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/ranks/iron3.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5774\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:08 GMT\r\netag: W/\"168e-1930f23d9a0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6WPDhJH3X2lHwZ4AtGuAu0Mq26nHrzp49vOgs9nop%2BA7WfFHYShds%2FFgY9a6ni2WvzqprbBaBC4qmVEOuNBBsF%2FLOQ7ESaV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf5fee30b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"955d2b7cae2f7491740579547434242a","sha1":"80c1b7282b04195f86c2784187f74e5b4bd6aeb0","sha256":"43a7361a8457eb511a4d802cd5adf58562b7c32540be6f82c181de383dddd104","sha512":"93c07b8cea44b602bed8c2187fed9101f5fa097c86b604053fc15b154dd8a85a420e636ec5f933aaec2f297cbf9c28f145e4e53809f03fd2dd79def36347cdd4","ssdeep":"96:tjeOf8aj8U0lC51ah89a++msiAFv5oZvW+7VJR/UijaHE4W1ArP40HxV3FRkX8py:rh8U09WD+48kvWuX9ahWQVVOs7Kz","tlshash":"e3c19f3d0a1562f009dd506f4df8692f48e8cc95fe15779655f20f696080e91532ccb1","first_seen":"2026-01-11T01:55:53.434029Z","last_seen":"2026-02-13T04:13:07.592614Z","times_seen":45,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Inter_Bold-s.p.fbbe7604.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Inter_Bold-s.p.fbbe7604.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"65560-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYUwW4eN0h%2BxshMbynQL1%2FUt9qPKpCzCGAksLlJoGxXJUBm9%2FfGViiZArC3SUUuEIt%2Fwk5tCWCPVyrQTxN6v2M0xZA4lx9tE\"}]}\r\ncf-ray: 9c740ce33d2b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415072,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterBold4.000;git-a52131595;RSMS;Inter-BoldInter BoldVe","md5":"8f2869a84ad71f156a17bb66611ebe22","sha1":"0325b9b3992fa2fdc9c715730a33135696c68a39","sha256":"0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1","sha512":"3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834","ssdeep":"12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8","tlshash":"ff946a1bf701e70eca562c388af59bd033b9bc91791ee24b705a3a09dd971b40ad71e4","first_seen":"2024-07-29T21:54:31Z","last_seen":"2026-06-04T16:54:35.364993Z","times_seen":293,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/19b0da46175198e4.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/19b0da46175198e4.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"75b3-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=laqdFELTHfsWT%2FcnOwbii%2BztCn8%2FOFY0Z7g6iafb8ZmD3%2FhMjj%2BF%2FdiRaT7KwGS89e63hKYIOpu2AJhVsTn6MaEMg7PxikBV\"}]}\r\ncf-ray: 9c740ce35d4b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30131,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29774)","md5":"2007ebf0b401ba67c261030cfee8e756","sha1":"e38591bbe7d137269496a20c91da35ea00581c71","sha256":"e49adb5040e39e1241fb0ec7756630b4a0bbca6dc3cb4a82abb2c15772c1b528","sha512":"7768dae710c0e0a546c9502c8b1f5e49cde8ecd56541cf9dc726ffb8f694d4f5ed2ef5e5a27e26da06936686bb3f571f39fd2c81d85589f00808cf11c3353109","ssdeep":"384:lDxQbCQlLQVt1VmIudAorv8ii9gGTHR42VqzR6l+mgebWgrw1gC:lDxQbCQlYHmIuq9zrRUElHbWgrugC","tlshash":"a5d2d690d121b8b8ac6b89eef57d801d721d1b24c71d0b25b1bb6efc13446c87e53b9a","first_seen":"2026-01-31T21:08:57.374651Z","last_seen":"2026-02-02T22:33:10.172899Z","times_seen":67,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/bc00dbd968053a62.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/bc00dbd968053a62.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"107fb-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNlHEnR74or5EXD1uPBabiWfK%2FK4wHzYePCZmMabSgO5ptH7zt9k2vuZns6Ze7vgEnU9jbdbkFRdSy2e7RAiRuTY5fXzLHIQ\"}]}\r\ncf-ray: 9c740ce37d5e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67579,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54063eb7b6a4e8845b7b5621d59393f2","sha1":"1dd66c0341da2e2046839b93e596e940817f6422","sha256":"c1bf519ba156ca7fb4bfed64075ee0b668cc32cce0f8a00f4ce720371dee3bc7","sha512":"07eb929ac5488c8b066a963b55d92a1d4146f1f6ebfc87e977e602a7faa1c8943511f3c785b04d6e0aad2e89d14d567e6d641a9cd476de66590be4d7d2248a49","ssdeep":"768:e6OHRgDFZ92YskdtAO/rx4soJY0W07sXlAa7Kht+DLN1AbgnnqD+hH:HOHRgDFZc4tAsv0h62gL39nqa1","tlshash":"bc632ae63351b462d3db5196c4ae8501a27a59e4240c083c75fdddeb3822c8962fbf7e","first_seen":"2026-01-11T01:55:53.442527Z","last_seen":"2026-02-19T17:02:28.647339Z","times_seen":73,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/83f137a05a633d06.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/83f137a05a633d06.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"54b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=miw6OyD0Lxh82CaT17perq1Uz%2FUSs4gEeZZ%2BaDfFODyF1psDU2VlHFjW8GiOfblVnNJ2QdtIFHHiCdVQa98yDMTJ%2BAjVBMac\"}]}\r\ncf-ray: 9c740ce38d680b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (998)","md5":"d71a9dfc74f1b0837eaf1c0c2ecfc840","sha1":"934dd225917e22545e4aa04118d7aeb28a86ccbf","sha256":"cfa807758de5d91ecc7139cebc4af03b69ec8a02410589222ec6bacea664be39","sha512":"a7170c749edbb15a4d2413673dc3ac0ca9a8daa21720a10db769fbb5189ede64f0d080f60e44f9d2bcdcff4d60ce046afc472aa64b9e722c6c2b11216b3f0d09","ssdeep":"","tlshash":"db2186980310a5c4b1be11d9ec3e410b702514b79b4d95baf0fc2c3a2b140c5a9d0fea","first_seen":"2026-01-31T21:08:57.199938Z","last_seen":"2026-02-19T17:02:28.759612Z","times_seen":71,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/track","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.1.3\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-8ff4095c751756ff-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nContent-Length: 189\r\nOrigin: https://vuxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":189,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://vuxwin.com/\",\"__title\":\"Vuxwin: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SxPXGS1URHt615Uqiui1%2B5yz46sy%2BzWEeMrK5MgWH6UOMntCz70f75RQcGlmIk8%2B3EK80WfDriCzcKiPwhfIlsAhdlz2cdT\"}]}\r\ncf-ray: 9c740cea7e100b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/bets/lastWinsNew?filter=highWins\u0026limit=30","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:09.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=30 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-8009287ba5392b47-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAilCPCxcokC8SEAKIf2%2BOzHekT93geIkjdlxAxfEnzy%2BZSpJkfjs8Z37XNDWly6hB1GD5Sv38iJzPzzPJHH5zBj%2F2xG5ATy\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1d2e-Pgj+2mK+N84PnQwaUl5v9VMhJok\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740cf20e890b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7470,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f609c93b2265f2c2df3a74ca90efe12c","sha1":"3e08feda62be37ce0f9d0c1a525e6ff553212689","sha256":"5fe5efd611810b1e8ac67f52390a37952e37faba9ef67a5db44bd1ec89adee7b","sha512":"c5d4f859933487e065c1a401cab47f8ae7b5b46a5c3f865a23fbd88e5604c5a3031e8a9d007d292175d75f93249856394eeda550876b9e3343aa66b3ead63f0a","ssdeep":"192:hkkKQE3RNLQPRCtqVB6OsC1zQcVc5QtFlSxnSh8kara1z1ftKQVDL:iFQE3rQYwyC2YccD/aoKu","tlshash":"67f1d03a60fd18e8904919c6b1c73925b8ed640728c49e908f6ccf3da6f8959ed065fb","first_seen":"2026-02-01T20:03:45.234951Z","last_seen":"2026-02-01T20:03:45.234951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/privacy?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /privacy?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-bdc52297ab8ba2ad-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CderTQV4ubMzFmpWcby7F%2BfZE0rXpZZHf%2BMxmHDT9hkGvb4WvnY%2FHtpQS6hgTUn1bHv53IeAw2ErUyqFpfVN5UBd2ZPlVsQX\"}]}\r\ncf-ray: 9c740cf76f030b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/terms?_rsc=w0q9r","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /terms?_rsc=w0q9r HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b15a89428c7af96b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/terms?_rsc=w0q9r\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3F39NWNvED4TakOx5iq2HqNY%2BYDvo%2BbbmDHpZHmdpX1xHqW%2FpfOLjLM%2FGusFGpiHoyCRpm09DJy3eLVrbyq8nYdUZg%2F2tRZk\"}]}\r\ncf-ray: 9c740cf82f190b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dbd0-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLuGY6wmavGGBsELktRD7NHX5A5TzyWBMkAjJq6AFOfBnsd0t8ADL6VJam2HCqQilIgmNOdZcgBfNsPmnw4FrwltiAp%2BPN4J\"}]}\r\ncf-ray: 9c740ce33d270b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"337352e89c0a500c19e7c3a1cd83161c","sha1":"5987ba6a8b8c8cc7f755431eca614ea7f5de1b96","sha256":"7f5b8463e4c88e51ebc803105b9099def8163754f3a4453bb66f822878471499","sha512":"40d9cd93dffd18143dced57120735d2b31bb2added5cb801fdde509eb9f44db073aa69656befbb1eef6d957e3c4d77cb4c73e814ad72f64b46947c4a9e1d60ef","ssdeep":"768:PORWnLfP9U7ifzsufcbBUZPt7zrjrhPwUBUBv5pGUh08QtKFhj0akpAQ:POgzC7eQ+ckzHxw2MYq08QYrj0akpx","tlshash":"31436da6f721a30cd3676dbc985343b44b75be34be22475bd975273fee050a04c22a89","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-06-04T16:54:27.221689Z","times_seen":473,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/70c45d6675f019b3.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/70c45d6675f019b3.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"7a59-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOhKWbIvwHtqNfOu3MdyfMVPhwhJZB5pJTEap1svBZkH75WXTbPHkzrgDactDk5wUY%2FlwtE%2F3D8wGPyYUZBdWIs%2B%2B6D5CmsC\"}]}\r\ncf-ray: 9c740ce34d3a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30964)","md5":"109dedfa8a9df629754107a4360cbed2","sha1":"dca0b5125582597623dd7a5f137bb172eacebd4b","sha256":"66937c36d62b42f9c0de04ed3961be40fff3bca6a84a6e8675ccf6bcb7bcb244","sha512":"75917cbf7e84472836f0f36f0d6204002de0ef185d062a67a4160f39b8165bcdb07ed964ccf923f78e9a4bec22cbda7fd444445695eb1f68f809df6d0d9a2def","ssdeep":"384:I+FjjzUO4kzleEPQKKUdoxUCHSWiDp1NpTLTJJQrtgG40/H5JiereqeCEYjYvbxI:I8jkO4YlMsdpCzifNpTByEqrddwR4","tlshash":"96e294a971d5f4910ba354b5803f500bf23e0c76296da0f4e3a2cdf9b9a055ed132f9a","first_seen":"2026-01-11T01:55:53.490165Z","last_seen":"2026-02-19T17:02:28.781185Z","times_seen":96,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/hacksaw-pray-for-three.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/hacksaw-pray-for-three.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26524\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:00 GMT\r\netag: W/\"679c-19baced6e00\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jD0TGUUyUVBNB6JokMMkUkhKJpLo%2F8UGQkR2LOw8ZYr6C1m2%2B9q2o7COoawfj%2FHYbw2Ya5P3XB3k7NyWUJ0s5BPpEg6djIut\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740cf41eb00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0d3db0bfc949221e16d80e078362e92","sha1":"30f5fb104456cdaf59c1453b5e0ef5108219e611","sha256":"cc75dd588c786a43908645a071a1707f68d7500002b70b059965d669a7f9b96d","sha512":"97a78ccdcd7002b36a486bda6375e138a3d997d08b57e350993918d5163f4c1ed8ecf19ba6b295f0be3dfabf40f3f2901e8320a58989bfb61ea484b09d81d4b4","ssdeep":"768:eDObjNZta2o8ug1Kdts88+1nI2zCrga3I9bYBQ:eDOj7tap8uCK3ssnI2zJa3I9bY","tlshash":"81c2e1293b367667b9923d20a2f00514ac66f4f028f5efcfa7804812c97e467f5d69c8","first_seen":"2026-01-31T21:08:57.245187Z","last_seen":"2026-02-13T04:13:07.620979Z","times_seen":35,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/group/slots?_rsc=1o4cj","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:11.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /group/slots?_rsc=1o4cj HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-afb6b47f058e1cf6-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:11 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=1o4cj\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX00oOjmE6VpvBTglTZeXoS3Ahb59dbiShC5uf2vLAMu2znMUO6sjNOCbnJBpIVWQ%2BO%2FeCAHfg00Wb8V%2Fv1nv1RlUsZvb6ii\"}]}\r\ncf-ray: 9c740cfb6f6d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1438)","md5":"43a041ff0d09d53eb80b8beec1657fce","sha1":"83a54f5c04e4117afde6b46b76d905ccf7839d54","sha256":"033fd2859c4b9537cd1b49e2adb4271f232b19a78928ad2f65c39eed6e0a9afa","sha512":"f2ddc0a883ef47407a4ccd6bc5a4cd98e99ade005ca1e0f2e40302800293c4ede1f2aa9035bd4c29da719eabd573e9374d97b02cebbb664af96a07c65f2d4327","ssdeep":"","tlshash":"fc412179890cec4e5a67c969096fe31a560d1673c7701eaad7accd0e1ac603e4f70e90","first_seen":"2026-02-01T20:03:45.045325Z","last_seen":"2026-02-01T20:03:45.045325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/games_new_webp/pragmatic-play-cleocatra.webp","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:18.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-cleocatra.webp HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976194034%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48892\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:01 GMT\r\netag: W/\"befc-19baced71e8\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ordGtXBpviDEu%2FFVqdQfbC36Ge1JEqHgK%2F0bI%2BmS6ew54LpqmAnXPfgzWQ5BssDMPOn1GMk4RYTN5xxJ%2Bb0PMOJ2tJCZ4dmm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c740d286a3a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df894af6cacf8358a74838e1a5c0f9ec","sha1":"d4c13a9c1c6f164b2190032347395682ca6ca9f1","sha256":"57a16a27abd0badfe5470b5a8d7b268ef48c393152ea9f031b567e83195a179b","sha512":"ce711c31dfff885a8e97b5f12162c3c1b277e4236ad2d5328a96074cde2b9b9deb44c54fa64f002524ae527c9ffdefb96cf8b1e745dab38ce10852056310ee5d","ssdeep":"768:K2GUeIB2Z5j3S8kWgne6+ckg10xF9z6t4UGtkdAt+A+HG2es+SHw5YGsmk2gT2xy:fHB2j3epevckg12FFXtk6UXHG2xQ5Ypd","tlshash":"ab23f105f9746015e15ee2708ef9cc57a62f5fd25ec219b8bfeca1661ff44a1cd90006","first_seen":"2026-02-01T20:03:45.240649Z","last_seen":"2026-02-01T20:03:45.240649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc14-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyWeY64%2FHteN8DIbaLIcfdkb1TFofUG2dkZXgsvLUHMBH5JaluLIJDjKGm2dHx6rxUMOLfSbF3rsabLIBI9CZXuBgKQIuHY1\"}]}\r\ncf-ray: 9c740ce33d2a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56340,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"41de6d553ba4b1825e9cf023e97e2ee4","sha1":"c2c26e18339912a10d796aee9a19ce1aff5177e4","sha256":"cd4f7b027bc8e71a19360a426cd694eb195f6fad4142437047f33b312a8c4e94","sha512":"e6b614a65c7441b5a6967df47b1bac808f8966ed8b43446fe91056235b6797653999b9160172b77bc92c2db35e411a1112e97071dc1ca8ee17a7b288357c6fd4","ssdeep":"768:8sVAWXhIU7ifzsuFE55E5bBvQvbKtdE68fjBzPrloGWJ0j32v6w51:8CXV7eQWbTn8VyGWKyv6wX","tlshash":"a9434ba9b316960dd356babc946373b483b0bd3caef3c35b54b1673aed4d0a14c11289","first_seen":"2023-10-31T22:57:11Z","last_seen":"2026-06-04T16:54:27.201796Z","times_seen":287,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/media/Roboto_Bold-s.p.1734e663.ttf","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:07.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/media/Roboto_Bold-s.p.1734e663.ttf HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:07 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"28da8-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsIoIzZ1887GDA%2BitB25TZeNenTlTWgl6ASGLeqoTYvLYR0yoSAbabTNHIXv%2FO6XZcVlk7Cp6ESRL8VfQFL3rCdhAWimSyDI\"}]}\r\ncf-ray: 9c740ce34d300b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-06-08T12:52:08.378435Z","times_seen":5998,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=64ffe1we","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=64ffe1we HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a7af4fdebce57153-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3eVowLzkgcCtFMS%2BGF7k7tnudiQTpw6xW2lZNx30kErqcTTi%2BAS1QHmo%2F%2F3p6VysE8SR4spLWiLTEUMHOi3dhUf5Hi8Xxt6\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c740ce83dd90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"21154378c8c03c48d8c7681cf245786d","sha1":"880607b57ac71171057c0a37d25f834c610e3843","sha256":"a0e5f18e7fa2e73e94840f41185439be5a2eca60362797c54390ef5143f8135a","sha512":"f5b46d018d13a1d53ef9c08e8ab3b5115bfdefd210a585c5e2147fb657066d4c05958b68e4065f1725053a2173a46796f944fe9c569cbf7ebfcb07d844b5da00","ssdeep":"","tlshash":"9eb02bc0c01c52c1e930b38035e3ae04040c784f46c0008832180444892a1202001b37","first_seen":"2026-02-01T20:03:45.244996Z","last_seen":"2026-02-01T20:03:45.244996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/second-design/logo_blue.svg","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:08.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976188218%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:08 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"556-199780cd538\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hW4LPJ%2FS4iqeV%2F2hKiXptb3wWo440gDS%2FDBaoEkdysMjfrtVTYKrmiTALfQUwWEXkCNT24cjtzQJzODAqoAhpS%2F9uRODOQdx\"}]}\r\ncf-ray: 9c740cea8e150b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb70d90349998f9fa492bc2a907fe894","sha1":"54823ba083d0332c2ac42162d1a4c6f47478050e","sha256":"00f69279206e53c192bdc9472d434b948a56123c7e5c2fce096432e54bd87f77","sha512":"c4c0009e1577c177a428fed81430f234d6f65c83f2b56934bfb8b6a1169f6488b06ff24e8a144e15fd427366ec65dee3694acc028ed433460ff5a6545ae24c68","ssdeep":"","tlshash":"1f210fb8b099d936d234d36cfb98d42591a082d7c4c58069b0c9fb2f98698c35f1e3f4","first_seen":"2025-06-29T20:05:39.730735Z","last_seen":"2026-02-19T17:02:28.733605Z","times_seen":79,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/_next/static/chunks/a7c7a8fadd85f653.js","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /_next/static/chunks/a7c7a8fadd85f653.js HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vuxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"3128-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGhpJ2w1ArA7ugcc0teYaXWRqwHWCproIlKXn87wdOZ3qx3FMXJcFagvH4t9pHVbZfJqHDMDpn7W%2FiyPpl50HUumuqz4KFQg\"}]}\r\ncf-ray: 9c740cf81f120b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12584,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12227)","md5":"6736d35e645199d0fbb2c26ff1a4c4f6","sha1":"330babe7ad7a1a008df4fbfcc4aa2022ea5216a0","sha256":"a6c5341275522eea933fa0b30bbd42b98d1d5e1cf7db03c462ec5256d35523b2","sha512":"28bed02c6ff5722134d2315615d52efb1c3a29ffa7bb4da160554f9a7433ffbfb879ce9d3c2da0d6a67a42b3ad8476e0253814cf7aa8dd3197fbf256900127e8","ssdeep":"192:GL4RE0SZ4r+zeLhVbzB44ZdLIx+7TFnRA88KlWOfSeLzt:QOr+E5ZdkxGBnRA8flWOfSeLh","tlshash":"ed42c9546154aeece5bb00d1f82f810d312f3f98c60f8870b9bca8b91a645d43b56fda","first_seen":"2026-01-31T21:08:57.356712Z","last_seen":"2026-02-19T17:02:28.855421Z","times_seen":71,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/privacy?_rsc=1sad6","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /privacy?_rsc=1sad6 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-9d6ce02acbaa3ec7-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=1sad6\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFPm8OZ%2BlmRUf8WamxC9ScsG5LbVAmLd3UVdoC926YsxArxolt3BdQQhdEI%2FFdpDd52D8y9qoBkukghgYeVWQzSFnfqQaAi9\"}]}\r\ncf-ray: 9c740cf82f130b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/privacy?_rsc=ktuep","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /privacy?_rsc=ktuep HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy/__PAGE__\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-a80677a3b17728f2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=ktuep\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NX3eZC79cTwLWzcPA1zx1LjA6Kph33TqyYxca93j61TeXaJV8rAoWtSzeZssayr5nxf28EIHWv4LmKStam3jhasWZH4SPFCi\"}]}\r\ncf-ray: 9c740cf82f170b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20894,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4001)","md5":"4db353f9877d14900de523ba74ff7ffd","sha1":"a2d8a1d2ea70c17457195b2e29187abc1d09d98f","sha256":"2b878168b4ec08d7a98baa4cd582ed7f7b467f2055678f6ea493016bdb0b9855","sha512":"f234209d14e938fb6dde6ba2ad7d1d2307edb3d847df57870f3739150f78acf1283ddb0eb106b913181269e5dd0d9c637f8d3ff86e91bd565806d8d4f95b8ebf","ssdeep":"384:ySDkxz0uCbG6de7ROEFgWS0BAXBTvxmTUo8ZGyWit7Bf/9pfQIDro747eGGQ3XA9:Oz0Lbfde7UEdzLKf/xr047eQnv3y","tlshash":"d692b62ed708a7685bab01613a1fd6b6f72d413dab62ce7a69bc861403465342f373c4","first_seen":"2026-02-01T20:03:45.249151Z","last_seen":"2026-02-01T20:03:45.249151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vuxwin.com/blog?_rsc=1uhg1","fqdn":"vuxwin.com","domain":"vuxwin.com","tld":"com"},"ip":{"addr":"104.21.74.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vuxwin.com/","date":"2026-02-01T20:03:10.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vuxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:21:53 GMT","end":"Tue, 31 Mar 2026 21:20:21 GMT"},"fingerprint":{"sha1":"01:7D:A0:25:E8:0A:96:39:DE:6D:B0:75:48:4E:EB:3E:F2:87:DA:51","sha256":"F9:FA:55:61:F7:AC:30:9A:02:2C:2D:64:AC:4B:21:9A:01:D7:56:E4:A1:77:12:E0:C5:0D:1E:9E:F2:E1:FC:78"}}},"request":{"raw":"GET /blog?_rsc=1uhg1 HTTP/1.1\r\nHost: vuxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vuxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog\r\nnext-url: /vuxwin.com%26blue%26en/second-design\r\nsentry-trace: c299a62b754c4615ad2ebdfa7207d2ca-b3e3f3a64aeca6d4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=c299a62b754c4615ad2ebdfa7207d2ca,sentry-sampled=false,sentry-sample_rand=0.9152900265202158,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22distinct_id%22%3A%22019c1acd-4d1f-7fc1-8864-72a8c5026277%22%2C%22%24sesid%22%3A%5B1769976189603%2C%22019c1acd-4d4a-7452-91f9-e8b4f67585ac%22%2C1769976188218%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fvuxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 20:03:10 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /vuxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /vuxwin.com\u0026blue\u0026en/second-design/blog?_rsc=1uhg1\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7UWoVr18liIReKne3CMCj5gKX%2FJtUggDWHt4o%2B7D3PxwCh0IJ3PoWynxND7hdx0LYOr4j7wsvWuLASx8a%2Fp1i7qyMv82IQo7\"}]}\r\ncf-ray: 9c740cf8ef340b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"vuxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}