{"report_id":"74cd82af-01b7-4851-9a30-e1d0ae8265db","version":6,"status":"done","tags":[],"date":"2026-03-05T13:04:18Z","url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"104.21.41.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winspin.icu/home","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"title":"Winspin Casino Games \u0026 Sports Betting | Play and Win Online","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"104.21.41.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T13:04:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-05T13:03:48Z","timestamp":1772715828,"ip_dst":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45502,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-05T13:03:48.275036+0000\",\"flow_id\":69024406102286,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.49\",\"src_port\":45502,\"dest_ip\":\"172.67.194.208\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"winspin.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":913,\"bytes_toclient\":3517,\"start\":\"2026-03-05T13:03:48.254222+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winspin.icu","ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-24","domain_rank":0,"first_seen":"2026-03-05T13:04:28.375035Z","last_seen":"2026-03-05T13:04:28.375035Z","alert_count":474,"request_count":237,"received_data":16864251,"sent_data":111516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"a2.espncdn.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-07-30","domain_rank":76908,"first_seen":"2012-07-08T10:27:07Z","last_seen":"2026-01-23T14:51:00.415782Z","alert_count":0,"request_count":2,"received_data":112537,"sent_data":976,"comment":"","tags":null,"fingerprints":null},{"fqdn":"twemoji.maxcdn.com","ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-11-30","domain_rank":457311,"first_seen":"2017-01-30T05:01:32Z","last_seen":"2026-03-03T06:44:04.271328Z","alert_count":0,"request_count":13,"received_data":21900,"sent_data":5870,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s3media.247sports.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2001-04-18","domain_rank":343597,"first_seen":"2015-10-10T07:31:30Z","last_seen":"2026-03-01T18:02:14.471647Z","alert_count":0,"request_count":2,"received_data":123486,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"i0.wp.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1997-03-28","domain_rank":841,"first_seen":"2013-09-17T06:14:42Z","last_seen":"2026-03-02T04:28:58.884723Z","alert_count":0,"request_count":2,"received_data":93493,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.deseret.com","ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-09-16","domain_rank":101844,"first_seen":"2017-03-11T01:57:04Z","last_seen":"2025-10-22T23:10:30.524401Z","alert_count":0,"request_count":2,"received_data":17245,"sent_data":1120,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ede46ed25a51b417.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e5bb589cc16ca039001c07057fb28a4","sha1":"b5665dbca43c796f3868939e426cac74de709bb7","sha256":"27c2297ad708af95d246e037e0c5c910a07c70e3b59b9ebf2ac7255b99e158df","sha512":"01d2f9c51d846d37efe2b5582ffaeffb7517cae07fdf62b5c846170c9bd299c419b35621941f4a5389c031aed1770fc1eb24ff26f0d35243824655bafa8136b6","ssdeep":"","tlshash":"7941451e0e04fd9406562168adaade6c70a4421d90e2ec4caddd07e863ee35d453f73c","size":2318,"data":"","first_seen":"2026-02-13T20:54:22.138532Z","last_seen":"2026-04-09T01:34:11.936296Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/11015398626c7a13.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7f51f7958b0ad7b1bc73777b57a3a7d","sha1":"519e5b7857b8d029545e62fe4e82243b8f74fa7e","sha256":"240218fdd4292968f362c3099fd82ae117013642100f5090ed6d6910390b7b85","sha512":"0200ad238303787fa699c54ac2681a06e985ad0015775db2f01b2da0796036c36f86fa35d478b323c845c49214d013c60fb9e2bb5bb2f1d317a14afc2b9328b2","ssdeep":"1536:QJrGFCLLa3NkeP5sUtM+Lq4RV1JdOyLS14Z9wGIQE+rJiB7:QYnR9KbQY","tlshash":"60b33de0335475f4970742a5907f810cb12d79bcda0ac858f27c7ce92a349c57aa6fa7","size":110558,"data":"","first_seen":"2026-02-18T18:42:32.56362Z","last_seen":"2026-03-15T20:04:55.121562Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/c6203b83c56e0c81.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cfa54e00756617f44fcfb4644113094","sha1":"bad52dae55ea9de7a37403d3a97d11127dedcd42","sha256":"933dd7d7a0166c7215c196999f4aa8c4cb9dab904e4fdb2877d19fa9cf5f4ff1","sha512":"889515d899a980ea190dc142de65f3b5059703fba2f1522e8060660306b2e317e8ff7f5248ec4ab3a7511e68af04a479ebb7ff0aa6272bb75fb958a8bdc15bd6","ssdeep":"384:XyeMIscbzoieVdDEAjyqGzXkG9IsjbOzx4BWJUs:XlIdwDkcpbax5j","tlshash":"29c2f8a5b582f8a0abc340ed407f4509b1366d1800adf470f2e5d4e572fe989a1b7bb7","size":27189,"data":"","first_seen":"2026-03-04T16:26:32.828773Z","last_seen":"2026-04-09T01:34:11.945656Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4d9e359e785ef23d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5862e9ea187de01125083d8c20f68f7f","sha1":"2f52c1d0570e5309a8b916b5916cc49cc56c8112","sha256":"8bc9afa09ae79ef1872292d06433e1a020f4f28a36c835c449f702383dd6dbec","sha512":"0742e5df535951c62c09c7718dce33597f473c260a68166600e857dc69a1a4399d2ae3bfbedbbba47a377f1355fe8639e35a851832108a10e4418364fafa6a1d","ssdeep":"768:eVr8+/eSI/CII5aZQzhOTK6O8uxlHV3MgOR0QXzEugD/MlYb:8g+WSEq176O8iV3MjhziD5","tlshash":"b34319a33245f9a9575785a0e43f830ee22c6c38581a8124f3ad3db95b95cc0d5e2f7b","size":57011,"data":"","first_seen":"2026-03-04T16:26:32.927704Z","last_seen":"2026-03-15T20:04:55.154911Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/d2a1bd5caef79182.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12aea6dd2db40075d0537086461e9e8","sha1":"a768f5451909d169607fb11564172a17c1f20772","sha256":"02d449ac0eaedc4335a5416bac75ab54ef34dd5d2a82e6ff6b1e14902907c332","sha512":"db375e4d741e3b8bf84af2509d26a773851e617834e4027260280043e97ec58e3d9255fba49668e7357f3ed8dec972a035cca29bafeb598b2af107d24073620d","ssdeep":"1536:8boZyx9ybUzDtHa1oRMLQY3yhbEWHmsrejXdyrNulW60mX+JAq8dlL35ZT:8boy9Rd6KaLd3jtsijXttOeq8PT","tlshash":"96a3d546ce2e8f173985f7b448d7b38a588886c7ce348a8657f5de9e31498cd608c763","size":106079,"data":"","first_seen":"2026-01-13T13:58:34.507356Z","last_seen":"2026-06-10T03:58:03.931793Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/10a6f40673bc6d45.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55536f33f6535c10478ef81aed3c13a","sha1":"b004d2c8050b6ddf653bf1c2ab5bf4b85f01c5db","sha256":"c64703d1e73a9e608c727aaf43c5e8531d2938908641b4b55f8a42407d81b1e1","sha512":"e63ef5680b5832c467ae7ebb1facc410edd29bc9d25161241bb17c3fbec2ee95701400800fe4d9d69d65948e56d79afcdccd47552092c0a1c4329d4d5317895e","ssdeep":"768:hVWDmHlOs82KywJr8EU6KtsdDvdw4puQ1BCbeAvrtmaP8apfG47q6FyX4tN5ualO:Wap54FEK+Dr0fgTua/PCo3lTfqR","tlshash":"d683d6f936d0f8920bab45a6c47f0005f32c4d37245e78a4a3e5ddda316455ee0e2faa","size":85617,"data":"","first_seen":"2026-01-13T13:58:34.459189Z","last_seen":"2026-06-10T03:58:04.082101Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f7ef9989b79cb92ea4c3717cd92bf60","sha1":"adbe8b2fc29112d61b98440a131645c748ffbcf1","sha256":"4dcbf3dddfd1dbae15a04bb1f70e3695ed132cbdd72810a5cc15c8bc1c8c3d5d","sha512":"571726da44aea618806a45c41b7a482e3faedbbbfc083f392d402a748aed35e3a71a1affb8d9bf9062ffb50ca6020f1bc77fad9c9cf4cff84963fd268efa2123","ssdeep":"","tlshash":"53d08cac009b8231b2bb606a9bef7589a452009f3541e4523c0c92082fd4b6f03719cd","size":210,"data":"","first_seen":"2026-01-13T13:58:34.529264Z","last_seen":"2026-05-09T07:37:37.090978Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/d822024b7c0240e5.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c46e0704609f52028dd7da3d2269b489","sha1":"0203bea38e30cf26f03e1b6c5b77d36d56e68d88","sha256":"783cbd97cd13b1fe44d90998b50d7ed5ec942c759b9eaf7cc76b9e6c67502cdd","sha512":"9a2d88552c55a65393b8929cb929c9d7a49c5a4ec029ffe7af50a98830a3a4ca3c0b5fd47f8dcc1fb0e1bbb9070160e6ab3cf92262e723e38518d3adbb1b4c69","ssdeep":"192:sMQl9Q8496PSNbyjEhg4sktLAwiKw1u5sTcAi5LeL1hU5ZMeuuNjOOpryQjgEzmP:sO7caBMIskw3+0cjeLuZJB48/A","tlshash":"1782d6aeb194f4921fa364a5803f500bf2392976285dd0a0a3a2dcf5b9f415ed133f5e","size":18201,"data":"","first_seen":"2026-01-24T14:43:36.827236Z","last_seen":"2026-04-09T01:34:11.947597Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f7465db492e6b331.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"068cbd1460639fe52fd985eb1332abb0","sha1":"0331a048e43d60a4734bfa03da0c6910abae6a8d","sha256":"d9441187b773b5079a46cbfce0184910c03419db00764cebb77fdaa86f45c015","sha512":"8218736bf1159c112a8651fa2e635b8016f9e177b247ee58842749176ff175cfe9e7abb9aea2d20fb43ca32975945fe51900d6a86079d757f9cca7109015d9ee","ssdeep":"384:nRVsrrjRG2RR7EE9Ci/ismVOo1hfqxPCz6f:n3IrjBR+E9CiK+ozfqd9f","tlshash":"208298d8b292b06156439425853f120ff23f7818614e5458f2b9e8e26e78f8d216bf7f","size":18451,"data":"","first_seen":"2026-03-04T16:26:32.842746Z","last_seen":"2026-03-15T20:04:54.994696Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4995390318262d42.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7e6d3b316671b804c05fe744c95765","sha1":"ec3b1e8ee00d6f9de4bfaad94e92c37c51660627","sha256":"92e69287b0ef61598b2880341eb4a6f73a83db8526723f8528761a2d7f2f7b6f","sha512":"14eeb08ef1ab3e3af27e167f9b3463e531d56f4283de18ffc940e37e7a747ef5d2fad361e8a72539139654d1df0a0e4331cdd842bb8d9a04f8769ddf5061afee","ssdeep":"768:H940K+YkVEWBxWj2VNofASv14MM9cYg5QDy:ddxYyBxvVNMASypCDQW","tlshash":"4ce2956062016ef8b3a704d4b46e854c701ebf9dcd0e8958b1ba7c1a2a84cd17ed7f97","size":33838,"data":"","first_seen":"2026-03-04T16:26:32.988955Z","last_seen":"2026-03-15T20:04:54.995413Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-06-27T02:46:14.230104Z","times_seen":55192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/d9e6e3ebb90c165a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d54e3d679627817f137bb46cc910456","sha1":"813eebe75fbb4ba1a51e02d1bc841ea389750020","sha256":"180d95eaf15582acb3975951ade6b15df0b1b710e537e61b02866b0a9ed5eb4f","sha512":"d546d0400933ce1b79826156420e6476d6e112346a8d9942ffe4557fb06fad7ac9b1a5f208b5bb3f87de0f77f90b332f5e4b925fe3a8a92e1a027992ab214507","ssdeep":"","tlshash":"a131a70e5318572d45a2e19a3fb7298fa3391122138ac054f998467d32667ecc2326fc","size":1801,"data":"","first_seen":"2026-01-13T13:58:34.47663Z","last_seen":"2026-04-27T08:35:58.66008Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e1042c89d2cd85f4.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ae144f1fd17ea24a3437c9e34f8e4fb","sha1":"833cfd723e5add0e7a3e97851942b5309a34c059","sha256":"22d7b075d6ae6d440287ae2f66d8da2613294d16c3ff8742c843300f520c4045","sha512":"b6cd4ff980a8143de7f539a165d1de7fc7a9c8726fb9875824644d72d1505d8ace2f5693265860b7f55ff6b1e339ed880bd2f0148701eaa496e172c5ca2112a6","ssdeep":"","tlshash":"abc0803548c1c4ac610525ccf5775765b46c2474d1dd1419d17e5e759165f2c594118c","size":183,"data":"","first_seen":"2026-01-13T13:58:34.404211Z","last_seen":"2026-06-10T03:58:03.950454Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0763e3794b994210.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3c4d4847343f6c24d2b991b2ecb1812","sha1":"e2161337d967fa10956072b1819bab01df94ac66","sha256":"d2c8380b27dd69f8e1381c5fba8dd65b17ca288f8111fd1f29031869d52c334a","sha512":"d6fab146dab6958bd87dac9cb57c9e3871f82e5da7b69aafc28820459f570f5cb42a79d876bc731403637bc22567eab7887063d21c6ffa11ba510906dc8ff62d","ssdeep":"1536:QXJpCuoWxmSznAYA6J2Apyobba01bytBKbaz:OpALknAK8OEtIez","tlshash":"a0632a647980f8a4639781dd803f4808f1262d1dd82e7b74f3b5d8ae27e6609b53377a","size":72361,"data":"","first_seen":"2026-03-04T16:26:32.982713Z","last_seen":"2026-03-15T20:04:55.038845Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/9644da4208edebf9.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"edfa2e8903e1a70ff7b88ada842b3ac6","sha1":"5c4c7f35fe90ecab56c73666cb4d1c89cfb467bb","sha256":"2669830fc9125adc4eabeadbc297c953b4272b76187c52bef1def4aa0add2f6b","sha512":"8117dc52f82ed7993063ad72cc984c9e095d4d780f19f5b2b8618a854c2e22bc6217c67bdc5950c912d58e2db88b31742e2eee71907ff2f9becd3a657e2b5718","ssdeep":"768:6DHr5myKUyESsjVrzATHIhCcRShYZOBunUxKRZG2AJUyH7Ha2ZNU3yjCDU9Uh3W/:6jr5qm7jVrUTHxcRXZGzJn7B/4N2fn","tlshash":"00733a5b63215eee753e23d6dd6f8e4ca04e29636682d538f7febd4127000c55aa0e83","size":73857,"data":"","first_seen":"2026-03-04T16:26:32.948656Z","last_seen":"2026-03-15T20:04:55.063808Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6b2b0ed99ff8fd1f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f84db8f24d7537ead1e2450a33547e8","sha1":"eb17a26ed238ab1ca5611a1a4a968c19a1e48f83","sha256":"623c16de4a864775ca83b51b12a453705bf0c7e5414f8e332262a361f7aeef1e","sha512":"a02246b91526147c092c2297b01d4db111858137e23e78ff627a597161abd57a17b3e183c1e4407ae44e3cafa3f2776638fd9238809a4b70899640099ff2fa26","ssdeep":"1536:EU86GOtBW2/YeMpEQ54l4jnYPfRy9rgd+:E0GO7WUwLVjz","tlshash":"84433af533657034875781d6903b420ab33a2565a40a482cf3789cfe39b4a8672b7fb7","size":55914,"data":"","first_seen":"2026-03-04T16:26:32.940088Z","last_seen":"2026-04-09T01:34:11.893595Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4c256775dea270da.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ee70ea383424bd00eb0b2c1d6d17232","sha1":"244cbc3e2f69ae1446d4520081b68339937cc883","sha256":"b8646432b01557bb5af3c7a28b37ff02c2bc5750b9592b637a8d93609e9f613b","sha512":"1d0f4408c726bb456c7f5f4b721f7aaf42eb41e2ad989cb6691d8c8f41c88f686bccf1e964598a325cd7f5dc1a3dfdb2a4be4726582379f4265ccc4205fd1bdd","ssdeep":"","tlshash":"ece026134107e5dd0067534ce13633bb20382bb69b4e342b914d1594d17865464cbd7c","size":340,"data":"","first_seen":"2026-01-13T13:58:34.468178Z","last_seen":"2026-06-10T03:58:03.871831Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/a8808de2127569cd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ea1b9253e3ed7089d054435ac46f26e","sha1":"2fa15c822c4ee1b38c308adad8ca16268ffa4d9e","sha256":"a229cd15a12b0326155b70ee20391c72bbf66b3c66f08f56cc11a47ea6dfd2ae","sha512":"4254104610b9e5bc89ecb4de7fcc4e965c3b5ce63e571221fa9fdb76caa29f8a04b5c4da07c1ece73d30ff5524f390728e15ddaa1c45a3526a5d1fd21b6f83d9","ssdeep":"","tlshash":"b31121d4a2875af909ec32183879c526d0f013cd808dc457ceacd12031f3e61bd91791","size":1050,"data":"","first_seen":"2026-01-24T14:43:36.985114Z","last_seen":"2026-04-09T01:34:11.860191Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/b7110877769f0f22.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23bb12ea805c4ff15041d5d47dcbac5a","sha1":"8ac9555e1d7cc34bc18b0044cfd973dae71a9d35","sha256":"8284d018dbe1da8020e3a56c8d8d2eab346e3f095f15dab9ac816e6abd37eb40","sha512":"1dbd31e77b234c873adee13f73dca5007341e64c62743dc1f7dee735da4a035b37aa1e6fbaf065d612d453e7943177b276631b1cdbac3cd9ac9f68d3a08ec994","ssdeep":"48:uD9ee91MYEHcLzmvTS7BCFAUA8BTOQaKz+B0hpANEXa5dEXvUq3zqNUq+oONUqhB:RyvYeBrwNIRNFsUq3z2UqmUqJ0YAqY+","tlshash":"6281710fdd060378074681a434ff1b9ee53ca54af1f685979d1d863c22b2bb2827e399","size":4123,"data":"","first_seen":"2026-02-01T14:00:57.510483Z","last_seen":"2026-06-10T03:58:04.116426Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/a5c8eb01cea61f04.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"858ea4549a04f10df14e31dae7b216fe","sha1":"c7ce85780e7d7472114fa25800dbd80760984a51","sha256":"88cc7a4bd9efc3b97e55a63b14c54b9b1bf743fdf204c2781527912c32761dfb","sha512":"5f4a785be76d8c9dd92832c98d1e31fde6b7657d2afd59477c027e47cf47da8ed8821a00a063d7849b6c330df332528ca085f12b8cff086de571dea9796ed1f9","ssdeep":"1536:10AtS8CUg+gDo/41xV175V0Q+VdWhkCSi+GvAkvkJwGRxPxdZArIlxXHSHTq4Twx:+AtS8hf/41xVuamiBpk+GFFRz","tlshash":"d1d319ea73517521d3db5199c0ae4b41b33a58d83009403cb6bdedcb296099962ffb3e","size":130232,"data":"","first_seen":"2026-01-13T13:58:34.451874Z","last_seen":"2026-04-09T01:34:11.890111Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3594c64cf924625c05a7010cafc018a","sha1":"0dfbc548122dea0a68476b400895ffa1eb22f645","sha256":"93268a0726ec1efaa676ae5171f84267e72b7c3d215b6190794cb4069d5f58d8","sha512":"8f1d3fdc6a2935557a199535e172a92c825bbd1b2ddf25cc9be3968fcd444cd0a4e023bd3eeb90c2c222588defbcb5f1ad05dfbd1f542eeb760769db532fd282","ssdeep":"","tlshash":"420156a9f32819da66d92fbfa06b570c7460203e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T20:29:16.213676Z","last_seen":"2026-06-27T03:36:11.066223Z","times_seen":6146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/80b5b3a83e5835e5.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a6332fd46de048523a45e2e63e85044","sha1":"ddafe71e7f76a02674a9a17287b68cd3d3a5f820","sha256":"71691e84d74b6c6ab66b2d6091bcea6aecba5f7d38d46c9d4385299f81b83d71","sha512":"002f7188f6b9b2d7eb2d8994c84c81f835de272fe012c59c2319aa30821a5693295159d1ce722cea98d17d19e538eca4dea76d3dde40165fcf16bbff41999956","ssdeep":"","tlshash":"90f0dca7f50d88e408c472197821633f3ad01af155ab9673c2ae4abc4bb7f5478c6455","size":498,"data":"","first_seen":"2026-02-12T20:36:03.611852Z","last_seen":"2026-04-09T01:34:11.895562Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/aa40970f24e4498b.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad701b551106c508d69103e4aa658040","sha1":"8609892225e5269a122aa36fac5454616200aa74","sha256":"bed556e04b1b76fb383cf0c5d5a347813603b9f189367ac18bfad9dadb0a650c","sha512":"2f055e8e240c3654edc880050c81126a1ca3706c3b8884b58796e4aae0b2a0a042d7be913e9a620772fab1fbe74bc1ee7cfd4b393445adb0aa30956647650265","ssdeep":"","tlshash":"4b4197ada6193bbc19374317d74962d1f12a4d38e27b840095cf87783101a39876e7cd","size":2420,"data":"","first_seen":"2026-01-13T13:58:34.391511Z","last_seen":"2026-06-10T03:58:03.993879Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3bf9612b3348457c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66b74967a779809565ee6bf2ee6b5b65","sha1":"f1089c9350d314e3802541ea297c22765ee890e5","sha256":"0ae3c7949f0b8568f400c953f0659ca5902499840c7029f0b1f904d83ebb4456","sha512":"49e8234f54190f060a2a7d0e239cfb34758d209d114623e9c90d391513e7cdcf9a302979affd6bb028154a80ddbe76967e8dd022ffeb7b959d0fc274dfe48223","ssdeep":"","tlshash":"0dd0a7596481dd3c1808529de662332a34a534b5618e2406d01eddb05274f5895405c9","size":241,"data":"","first_seen":"2026-01-13T13:58:34.43815Z","last_seen":"2026-06-10T03:58:03.931236Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0ae4c2ebbf3c8f80.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f786781fa0139399c4b07c3def81cb2c","sha1":"f12b9cf0bd3b8d42aa3dc179629d4e8fc203b199","sha256":"95b2e8a5d1a8e35d518f660e97770d8ff83f17b62bc103c9b19959ea924db102","sha512":"e59b1cac732294942803051c56bda51d0d360e90f1320cd3e6f7722978b53d31d2092aab9ebe57e0e1750da96aaad3cbc3c9843fe88c8518eeedc37cb983bcb4","ssdeep":"384:GdEvy3EVWntvPSBAXKfoPnXBdY8+RO5yKNFaiEMEEgYAvJ9JU+k76DWAC/+kp+Vx:rkWE+k9NQFJg76rgp+Kbe4F32","tlshash":"cef218d8b2c3b028123364a9007f7117713ebd25641d8943e52bd8d57cb6e9a923bfb9","size":36312,"data":"","first_seen":"2026-02-12T20:36:03.574035Z","last_seen":"2026-06-10T03:58:03.92414Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/11015398626c7a13.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7f51f7958b0ad7b1bc73777b57a3a7d","sha1":"519e5b7857b8d029545e62fe4e82243b8f74fa7e","sha256":"240218fdd4292968f362c3099fd82ae117013642100f5090ed6d6910390b7b85","sha512":"0200ad238303787fa699c54ac2681a06e985ad0015775db2f01b2da0796036c36f86fa35d478b323c845c49214d013c60fb9e2bb5bb2f1d317a14afc2b9328b2","ssdeep":"1536:QJrGFCLLa3NkeP5sUtM+Lq4RV1JdOyLS14Z9wGIQE+rJiB7:QYnR9KbQY","tlshash":"60b33de0335475f4970742a5907f810cb12d79bcda0ac858f27c7ce92a349c57aa6fa7","size":110558,"data":"","first_seen":"2026-02-18T18:42:32.56362Z","last_seen":"2026-03-15T20:04:55.121562Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6cec91c98d688ecd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee8b38c151c60720027b8e277413502","sha1":"2d8ad0c1f655fa300b6fea3ba9636173615ca100","sha256":"0924557938dd8e1db1e02ff3a5f83c89f52b7ddcf0fbf696800089ba4901d7d2","sha512":"45347972db7f1c682aa564fea4cfda5fcf28fd337d665410156779ea58e5a729537d1ca71303ec0c2ed09f90973ed986929be55176deafb6b0ba846d8b794441","ssdeep":"768:Qf4TuqQAQhJ0yB4du3l72F5UgsXE2pLp+fhycJsK7KGMM8GoVYqN4V2qN4IkZUNI:sAQ72F5UE2D+pqOWYJ2L/UPsXBVZJ3","tlshash":"6da3a7b84560aaec765a09a4706ed19c701b3b9dd9d7ce18f4397d4b29800cafbc2f47","size":102952,"data":"","first_seen":"2026-02-18T18:42:32.557713Z","last_seen":"2026-03-15T20:04:55.07453Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-06-27T03:36:11.068289Z","times_seen":48187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1d8410f129a659e882f6e80ef48b45d","sha1":"1d6480ba482cd0fcc0885d521778381d29e1b6d2","sha256":"8f1a66bb3132bd59867f5baedeb2e755bfbe69ce10d24878f5514897051fe90d","sha512":"2e54e53cbfdabdccce0dba0339a04be14d2c920eda6c5755914f646e83662898332fbacffdab854fe73d5d31dd4e4d469a06c89a4d8f48bad460bf2fd47403ce","ssdeep":"","tlshash":"cf6000300cc3000c000000c030000cc00c03f000300003300003030c0003cc0033300c","size":16,"data":"","first_seen":"2023-05-01T16:55:24Z","last_seen":"2026-06-27T03:36:11.069439Z","times_seen":9464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a87f811171a797b89b8d185d7a93052","sha1":"e9b49c2be7f7cd86eab532f326af34e997a7d949","sha256":"a2de2e58c50b3a040444955e5bed514b82e241acde87d5586be2336f0097e375","sha512":"3da88dfa70488afca88098c84a064e1b31bb7ce6cff36f4007be560397025f19fad3e934c5416a975c8e820b58006735439fb8ec3caded395d2499a4fc1765e5","ssdeep":"","tlshash":"1c60000000c3003c0fc300003cc0cc30cc30f000300c0000000f03c00000000030333c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-06-27T02:46:14.232915Z","times_seen":11989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/c27b67ef6a0f108f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff0eb9aabbdb9fdc6ad98252b61c506e","sha1":"0eba3616a5030214482282cc168b067b5cb8c4d2","sha256":"c44cf68447b11b233ac9a9fc6ae9971e30f6fa7947a68e75ff0d8d319b567ca7","sha512":"2a7d015993fc6f1f48688f90725641fdef481eeac34eaaafb4c95235159af212e574526e874aa5d8b8f00777308b2b841bade1f9bddc66318f53b99c23d3affd","ssdeep":"","tlshash":"7a01cb16404aa9f41403532ce596333e76380ea7c0b7260be15f272ad1f0d58628b238","size":695,"data":"","first_seen":"2026-01-13T13:58:34.497392Z","last_seen":"2026-04-09T01:34:11.899423Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/5e9b0ec455fb6ee3.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c879ff8280498538cf3276f8ab0de27","sha1":"9aa1af1760c677a2cb81a92384441238f1b3ec61","sha256":"103353ff138b3df27b2dbb80c215ce66da6ba569938408bd9556ef7801fb0c86","sha512":"89c2d5ced9c43bb93155ddf6f8eac732b0c70466f66434274eb219d18a57f2bf53d42031965eada09c49328d9bd169078f4a870636f86f18ba8401cf81531a98","ssdeep":"","tlshash":"5a11fc5b081b4c1a542140f418da7b87beb85c9f81d9801eed8d9797207ace87447620","size":1067,"data":"","first_seen":"2026-01-13T13:58:34.390631Z","last_seen":"2026-03-15T20:04:55.021028Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/fca43ff19ca84387.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"855a8aaa259c9f21a6b02af8cb97a58c","sha1":"aa42585d7e5a72a628c335b8f51c1847392b28a9","sha256":"284d8ae72633a59ea67dfc7e98f008a06839799d1b63caa791bb8fbda1d6c5f2","sha512":"bd5f4cfb8debef8aadbeb4a3a03806d893c7f49edcdfee31036e53832d5d169707c52d955558889ebc1d82288795d6b91e613ed186f60f70ce4f0f2e525ac70c","ssdeep":"","tlshash":"7b111c840ea4b47c2557120878f36781b07c0666e19a708e8ccf475cc2f9b38992f3b0","size":937,"data":"","first_seen":"2026-02-01T14:00:57.583606Z","last_seen":"2026-04-09T01:34:11.950215Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3f787267c4bb3269.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a70e838cb6c236474e4ed529f94ae28","sha1":"46cf97324f59980177e1693482609bb8632017e0","sha256":"3370ed272581b16bc4c49faa4a2984a010ef8de7a3b64d3803304319dfd796d0","sha512":"b6b5c156d9a6d1fb133df35aad8c76184bdca5d18faf5bb0cde0bf8b7fe7a7a15bed51d0fdf77f92029035b9aa53f3ff1f9d9e4156ccc2449bcc20ce7e465811","ssdeep":"","tlshash":"03f09e2809516dcd1c057a7cb864af46317418a640dd8e1c2afd4cf892f7f44d8250a8","size":508,"data":"","first_seen":"2026-01-13T13:58:34.39722Z","last_seen":"2026-03-15T20:04:55.02275Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/bd84bd126a31c6d7.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f5c682e79c6a7641a935d9dd9410dde","sha1":"a0975509f7466716edf5511e298f74f9f0fec7e9","sha256":"a3a928e75de69d8e8cf72da2d3ad2eab8b47a018c2bd8fad71794067d9d78fd0","sha512":"bac8698096fdd6a04c0577946a5366ecb06d20fb0c5619dc4c012404d0a89ee8807281632f8a7e516b95b6d267028ed85a9893df2102f264db2eee652ddc3b22","ssdeep":"","tlshash":"c6f0d4e74651d0a200d436acb1335e5e38e511598f4dee77e5690f7413f131bf9025b5","size":500,"data":"","first_seen":"2026-01-13T13:58:34.411554Z","last_seen":"2026-04-09T01:34:11.951281Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-06-27T03:36:11.061447Z","times_seen":172700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ca924d08485cf23a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f8ff2268083adfe6bc91f9ba3a56aa6","sha1":"93bf8cc4599ff6110badf5005c557e3ac4a2ae48","sha256":"8dd3d37bcb15facb6c46925b364ea6c605f7d5f893c950e6351cbaf6ebadfc2f","sha512":"02decfc42aa3a459f37cf0e43486064c9040e4a5612a075ee177eee7281f877373955239c3372e53ad68ca326d4e77ead774ded1edfa6fae2906b2599e291077","ssdeep":"1536:9X7tPfe6Rboi+h5m4XDd6tuyxo4fJV38OQJxcfUFkwn/OAwg4Np3nbVE69hCfXPy:SGJ","tlshash":"f7532cd017ac27ecf09a0ed6b116851db95f10fceb4ac724cba6b84421518d26e99ff3","size":63430,"data":"","first_seen":"2026-03-04T16:26:32.974905Z","last_seen":"2026-03-05T13:35:40.33421Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/2bc53bbfaac611ff.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb3b5cce160f2d44444de994c9921c40","sha1":"9813bfdff1e5ee5e8744374a3f6a1bb9d6f5df40","sha256":"abd06ab35cca99c1cf56473e473187d8b7b6ea3a062f4af970cc2000b3b1dd80","sha512":"a6577f4fa3ff6e5b20200bfc7c1df1b3efcf4d320c5992426caff2e37eb19393f7c7a6e4953f3ee4f60620accb1180978e02c5b9340a912b125356557041448f","ssdeep":"","tlshash":"b7d02b703150f8d44086a0cc8836424bf53a757262fe3495d7ae8cf16174f5d51e1a55","size":283,"data":"","first_seen":"2026-01-13T13:58:34.452804Z","last_seen":"2026-06-10T03:58:03.900596Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e871c8e1d1ee20fd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2dffa441f0329b72daf658aff5a951f","sha1":"44ce281e39dc390a699d8e2056940fc50b68574b","sha256":"4b90042c9ca22ebfb887fee2c77600db1eaa7506d1ee395fc2d13b87f8a396b9","sha512":"43b86b7db58da455844acc757c52622f2be11f7d7ff082ae4489f74d2edd18c2f61e9ecdedd0268d8a97754cb428bbae8afe38964eb40b5b53cdcd04f0633f1d","ssdeep":"384:yvQIkjOEx76ctwGZAE9l4P9m1lEkWFHWYSGXwz2NdCCVlC6L8ZkYgaJGr7FCp+Ck:yILXZAEim1lD2dleWbCzhRgi9HssE","tlshash":"ddf2f9a57251b22b7adac182983e4019f2296d18140d402c76edbceb75a3dcdf1bbf35","size":34308,"data":"","first_seen":"2026-01-13T13:58:34.387972Z","last_seen":"2026-04-09T01:34:11.940421Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0a84016ac97aaeb49a315659b6b9800","sha1":"de47ab8ec4b6763a3a9239909c494033ba9596b6","sha256":"f6e779e98412f569028f7c30c2ceabc1dc4f115195d87c8886ef800798c8cd6d","sha512":"a64551362a7411dc51ff23bea1def907514d81a90c593f3618f3b4b50f8940448e80497fdecf6be165313ac55a320fdb2af382b9c7d38cb19efe791eaed99599","ssdeep":"48:LInenObdAKDpFyhnenObdAKDpFyhienObdAKDpFyhHenObdAKDpFyVPUYUdsVrqc:Lky72+LUVq+L7A+Lf6","tlshash":"cb91126ee81bfa063d65decf016f6f2686e5e87790b0193df65ed98c023146703a8c94","size":4338,"data":"","first_seen":"2026-03-04T16:26:33.038773Z","last_seen":"2026-03-15T20:04:55.231001Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9e8cfbae194b8f05ea92684d4d70be0","sha1":"020feb32ef862d839edd065b5b10dc7232e04528","sha256":"77f2f162f348ce34af8c47616bfc6e6ff06a77f8d9d0bd0a7182a79cd9ecd7bc","sha512":"0f23f6d1d7a03366d79128ef556e46fb48da7b857147c1c22467aaffd24d263191b17cfeac9a127619b35a7c491a9cb03e80eb366fe6bb3347b555aeff3305b4","ssdeep":"","tlshash":"5f41a14ef80ff9512c21ed8f113f2f6681c5de7a82b04468b39ec9da056287b03989d6","size":2066,"data":"","first_seen":"2026-03-04T16:26:33.039799Z","last_seen":"2026-03-05T13:41:16.526523Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/aea6d8ed908afa0d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d2e23f6d8c9c4a994917eaafe374872","sha1":"9032c9f3b9c766447a473b8ac1ec8e54e5b32685","sha256":"4446b6c924429a47d7e7901971e98d3930a9d17c1b9588568a4af4436a9a827f","sha512":"260ad26d28f4e64fd12970f9d5b26fa252c6cf90fee43df8d843bb7731b716a1ef5fe58927d000c3da920b365b10fd77025ce1fdde6176d121714bb104501780","ssdeep":"96:tk6BEmzi5fGN1u6HbRJuh4nUPomOoxTcekt1u7SrS8+xipty0sO/83gPAUCHnw9x:tkEEmzi5f6j7j04wOAGtcSrS8+x6tycV","tlshash":"1fb19517b718326a07d34051baef859da37955247371a9aa5ea8c31c13a21bd93333c9","size":5419,"data":"","first_seen":"2026-01-13T13:58:34.455977Z","last_seen":"2026-03-15T20:04:55.125738Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/8f930a8b3cb46897.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b192b337f0c29559d82b0cd04d321993","sha1":"9d0e362c0a91e4d9697138bcb730b85b4d8484d7","sha256":"31de4a951fced7b4390ef1aa19880534c41694301ba2a83657b11d3a05bd5cb3","sha512":"60211d0b03b6f968e15b738db7596a40831763bac184ce9c4b061830f40ba9715af4d667c96c3387072789780920b3ee730251548c66cdc34df5eb131490e7b7","ssdeep":"","tlshash":"c8f0c08cc304706cbc4a13f8f7e59e3d53bc0c95e1d99508a89f4f6c2239519e0aab8c","size":552,"data":"","first_seen":"2026-02-01T14:00:57.533869Z","last_seen":"2026-03-15T20:04:55.158975Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3462338d369f835d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e553e02e168916bc3cb32361065c02d","sha1":"987728d7b21c06dfa8923049b52aca587eeb141c","sha256":"ccd3fb2588cb35bdd6d179460c94c22df80aa3bbc12bcb026b7d4a3fa9a6ada9","sha512":"a289a53e2f36aff190ab1e5d40e4835b81b3d70e5e74bc858ba2d9922f18649ded88da9be77bedf1028a3d56b8f54d78a842f013c70a420b7fe746360b2a8fcb","ssdeep":"","tlshash":"8ef0c9ba8055484c74003b3990e0adc538f819b698facd12bd9e47e8b0bed14a5019ba","size":554,"data":"","first_seen":"2026-01-13T13:58:34.392362Z","last_seen":"2026-06-10T03:58:03.917691Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0724a67b1049c331.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8ed1e5a4e1eeb82187df4f73f81b67a","sha1":"3e4c31819d546cbbfcaa68995b6de6bfbe7f882d","sha256":"8f370376066d4038065c26c3324ce7b7ef3fcedb5a296e43c444185dcf797731","sha512":"3a23c32b5efcd69f34ecab6a1801b5aa5b0813dbad556605f4ada6526432bcdbb08b313a206439f7fd52daf012671bfaa844803d1ac04cc930481f06f873320a","ssdeep":"","tlshash":"50c022286885e03a0188a4c8f0620614b84c38a8a64c540e903f88788061b18104008a","size":192,"data":"","first_seen":"2026-01-13T13:58:34.472217Z","last_seen":"2026-06-10T03:58:03.990426Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6e7332a64713445f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"640bbcc093f54267cb84eaedc629e5b0","sha1":"c1d3cc52ecdf674d8248abfd9540e7632fbaa44f","sha256":"95db70d4b5e2a13349b7b285499ed4f2f3cd1cb5faf089e35e68a3296702f5f3","sha512":"d977fbe41ca2531ff4c86b602ec807a872e89499fbb05f17aacb5d8692502d10617d67c1f0571ba8cb8619122fce6adfcd6717a63c67743728062379d6ed5d39","ssdeep":"","tlshash":"3b216346f50960f70ae973073cdfdebb61ec1044862a04249edecc3d03f0599dc1249a","size":1387,"data":"","first_seen":"2026-01-24T14:43:36.945615Z","last_seen":"2026-04-09T01:34:11.934618Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ae27942b7096491c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"822da84f8ac41fc80b5fd0783c88b282","sha1":"56e1ac390f64ced857c1daecced8fd5104330e30","sha256":"2523768f0fe0ed586a3d42ac371eaa76eb5d00e5058c7376dfb3e14d4707ae5a","sha512":"fda5f5359cbb1a7acb4f4c325841c6dcd27b92a25cf250edf0f84fa9e5dc7bc809de085322ed336f768e911bf0d0f000637b6332ebb2724cf173fdd71e1401a1","ssdeep":"","tlshash":"4d41349bc509961a1bd3432efcc15a86bb36211a8eeb25070dc9466302607bce35b2f0","size":1978,"data":"","first_seen":"2026-01-13T13:58:34.516024Z","last_seen":"2026-04-09T01:34:11.903751Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6d0896412bc5b9e0bb27eb0e57bc5b8","sha1":"a6abf77ab25c54c93dfb9f33e751438ae7672d2d","sha256":"dbae44edf581db0f1c60650ee97ebaab258c98b6b3e8c05ea89087fd4e91f5ee","sha512":"cb94eb33db40ee9e2d5af677a8b2f07bad1dfb450c2056ed44ac7c8bee2d5653b342005f9eecddd8c5e9578650052098c10ea78808b97228db93bd8eae2cedf1","ssdeep":"48:LBWuv6WfEu1TGglBf+iZGtf1GhVjwGvC0Gb/CzG3WfkRfnxLsXqReLnmQtRgBTls:LXs86SXmNsjw0qGK6kjmXQw3AVUO81V","tlshash":"fde19a0369c34176962ddf106bfa1b0c015c76224db3647e7b1e965f83c8538c6aeb9e","size":7043,"data":"","first_seen":"2026-01-13T13:58:34.534399Z","last_seen":"2026-06-10T03:58:04.125824Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0db80e237b828a3f068f7be8e767e94","sha1":"0b5d208d00a8afc9a85a4b1168fbe80feea61a00","sha256":"0c710042ffa2b5eb47ab4969f8314aab1d2d86fdc7fe9ae86c2228381b8d6abd","sha512":"65f685255823608c649e580e741147547bfedb2fd4c3f81482917c59575414c7a1e9b70b4a98dafc0798e1f232dcf50f2f2acd6db55b868b560d5ae3f64c5a29","ssdeep":"","tlshash":"e381390f780ace05dc7abca9123e5e3744cc8e778761ddb5818ece490a165f62bd8c81","size":3863,"data":"","first_seen":"2026-03-04T16:26:33.041422Z","last_seen":"2026-03-05T13:41:16.52791Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/turbopack-67b6a3e8a95fdcb2.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"432a4b6b685da118c4f96b9b4a38cdc0","sha1":"e03481bed34a618b1c798b18980de607e36720c3","sha256":"3779233948512f2041b7ecc1cdebe3446d4f4f9cad0ea22e20a8cd16ba277d53","sha512":"f12e0be1ffd130a534b7b2a4e0d3ac2ce342a1964dc9dcbc2f97fb70f0a8f97ea07b3e7cbe05165970ed7cb34b29b7fc638e2b077cff30552745db9e0cbc2ef2","ssdeep":"192:2X/IwHG+J8iEsuRn6EY8iaWkUmlGVhFd2mcKW9PZPKFXVqXmZ:2X/IwHhyXWkUmlQ8mcDZZyd","tlshash":"8622c7da37a6f07343afa1e7803f4144f1798869146d581c939ca8fa28784ae45e3f37","size":9946,"data":"","first_seen":"2026-01-24T14:43:36.897452Z","last_seen":"2026-04-09T01:34:11.85938Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f0706b7ff2c7babc.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eec1c9e1a0a45063bee7641ec03731cc","sha1":"f5643bf8a7b65a2df4f8aedf7ddbc9247fdd6456","sha256":"ffdea758e7f4299c287ff1699a77acbe33e2091615b0772c6866d8576aa8c2e8","sha512":"77c447a1ab18a5afd009355a10dae483fd7132d033715159871f4bfb4c61d92c2b99c97a5ced1d36fdf5d10decddbcecaa91d2723d76b0ca1c2de173c3319b81","ssdeep":"384:ovHXJXPfPFOCA/MRljvhk2vQvmhEueVFdaQRnz4fn/vfpVSh6jx6I:o/JXP3FOCwejZTIyeV+QRz4Phn","tlshash":"4c92e7d23395f2262b974091d43e4009f23a5d3a5449602cb6a89df3b5538cab2fff39","size":20368,"data":"","first_seen":"2026-03-04T16:26:32.868468Z","last_seen":"2026-04-09T01:34:11.930985Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b83769697daddf0fb9644dcc33874684","sha1":"e4f2ebe44cf7c4332803a02925204850f2ec0780","sha256":"536c467be805c78dd8835acd4a7f7ed39d48b2e60b03ba2625c7be983e2633ff","sha512":"c9259d63c68a01c15bddf8776f9885df17b4181b60f66e7c888c9726bda626db8743be11be8598178ae6c68a7a47a61d6dfc1a4c70bb55ea14fe7c82e6473ee8","ssdeep":"","tlshash":"b881e97da01add1efcd9b909147e1c26188d625b4bc5de36eafcee04464683debc28c0","size":4060,"data":"","first_seen":"2026-01-13T13:58:34.536861Z","last_seen":"2026-05-09T07:37:37.128277Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4542b55ff482d5ab.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"279532cfbd7810bb6138fb2eaf4e369e","sha1":"6cc9d9affca5e9cf4677154927fef8c86e575968","sha256":"a789cacd4f859dd5a8dacaca7c22df87206b09af2821359a5c74d66474214653","sha512":"51681adb81e93f4e4e12491b18cabad8239187591ffe053637e277897585ac0f07703f59d261d59c6fd5a79e4a367f8677a8e2cd27d55c66d6dd976714d2ee0f","ssdeep":"","tlshash":"43f08badd210aa2d6a47d1acb2bf9765a6b411a3504d1c03ad8fcda443307dea9340cc","size":593,"data":"","first_seen":"2026-01-13T13:58:34.423074Z","last_seen":"2026-04-09T01:34:11.917205Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/b4b8052d07fbc6ba.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"414b6789dce4bb30ff5e3473c64cabef","sha1":"91dcac40e2ddd719e9d181b812577c417b37baf6","sha256":"4764b38173afc00324923a1323e470621c9cb4d5aaf0670f2b499354cf9c91a4","sha512":"b6aa2f1157e3e81f30df221c4e9f1e12fc02103b05168fd8dfd83bc3a8b0e2428dba6eb116c4fe158ef98a55c271af3ab3bafe3ed35f0846267c24968ff54b05","ssdeep":"12288:z1CEUPlcmCAzCY/gAgPDXON5v+is6kvt2KINQBWSKjF7EA51NuzygKGXhSyYfju0:7H2byQFoa9Ggy6ju3mZ/8s0J47GE","tlshash":"1f15d0b41f996ffcab209ba8c5ce18e92d1d03db9241c4dcda5e6ea0937205c5ccdda1","size":893590,"data":"","first_seen":"2026-02-01T14:00:57.525197Z","last_seen":"2026-03-15T20:04:55.13583Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/14d0b6b938188579.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"697fbe6f1ea93a320bc71f945c844b89","sha1":"7b31ece177be780809b68a6230b40198d7394858","sha256":"9c6a6fe71268f2f879db9fc01740c4ad1869d83d758a1c1053492b4592d65ef6","sha512":"fe11c6e732b9fa7817295a3d6a06d430490abd43d3b4fcd9c6bba934641f7d72680415c14c4278e972df836a18b2f56ca4d61385dfb97e9606600ce6a30639c8","ssdeep":"49152:gxe+YrP/5xe+YrP/ixe+YrP/vxe+YrP/Txe+YrP/zr:6","tlshash":"f80612b0eeca9fe19b4d935480ff15cd2d3d2ffb26994bc8c2d2195221255c898dda23","size":3696475,"data":"","first_seen":"2026-02-12T20:36:03.645033Z","last_seen":"2026-04-09T01:34:11.973657Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/1a789260da75ea20.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f987b8fb60d2fe1714f174ae976e7dfa","sha1":"5c0370525ab8b57237083920a02766359338640a","sha256":"a57c4ec3f9f96d29f5998fbeca741af3dd39b17c0c3a4778d55200c9fbd12571","sha512":"38f7692f6858dfc3385beab48c16bf4e032cc2a8f57f77db9df1d8ea246dfbf33c4c474798416b800e83e2c19e15a5c5195ffd2ba7b1f2ef766d2fb690fbeb74","ssdeep":"192:yGZic0tjr2xuLKiyxZuWJ15N+vcg07Xx+filJbSbZpddtCRtHksWh7XFUQL++PWF:hZifuuLKlZu4Evc9QSM3tEtzWhl3mR","tlshash":"3f42d80bc62426f127ab0173364f79a2bb31942d6ff4f087c819d12c23eba1e55375a8","size":13176,"data":"","first_seen":"2026-03-04T16:26:32.9581Z","last_seen":"2026-04-09T01:34:11.941917Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/9644da4208edebf9.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"edfa2e8903e1a70ff7b88ada842b3ac6","sha1":"5c4c7f35fe90ecab56c73666cb4d1c89cfb467bb","sha256":"2669830fc9125adc4eabeadbc297c953b4272b76187c52bef1def4aa0add2f6b","sha512":"8117dc52f82ed7993063ad72cc984c9e095d4d780f19f5b2b8618a854c2e22bc6217c67bdc5950c912d58e2db88b31742e2eee71907ff2f9becd3a657e2b5718","ssdeep":"768:6DHr5myKUyESsjVrzATHIhCcRShYZOBunUxKRZG2AJUyH7Ha2ZNU3yjCDU9Uh3W/:6jr5qm7jVrUTHxcRXZGzJn7B/4N2fn","tlshash":"00733a5b63215eee753e23d6dd6f8e4ca04e29636682d538f7febd4127000c55aa0e83","size":73857,"data":"","first_seen":"2026-03-04T16:26:32.948656Z","last_seen":"2026-03-15T20:04:55.063808Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ca924d08485cf23a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f8ff2268083adfe6bc91f9ba3a56aa6","sha1":"93bf8cc4599ff6110badf5005c557e3ac4a2ae48","sha256":"8dd3d37bcb15facb6c46925b364ea6c605f7d5f893c950e6351cbaf6ebadfc2f","sha512":"02decfc42aa3a459f37cf0e43486064c9040e4a5612a075ee177eee7281f877373955239c3372e53ad68ca326d4e77ead774ded1edfa6fae2906b2599e291077","ssdeep":"1536:9X7tPfe6Rboi+h5m4XDd6tuyxo4fJV38OQJxcfUFkwn/OAwg4Np3nbVE69hCfXPy:SGJ","tlshash":"f7532cd017ac27ecf09a0ed6b116851db95f10fceb4ac724cba6b84421518d26e99ff3","size":63430,"data":"","first_seen":"2026-03-04T16:26:32.974905Z","last_seen":"2026-03-05T13:35:40.33421Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e0e9b5475e499cfa.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e0821ff365695cd3fb425fa2397a04","sha1":"54a3ff065fa647f12b34903c79cf249e17738ddb","sha256":"5f0508e16fb7d459650d9137fb1cfa77960024654903ddff15dc7639af8a1194","sha512":"1d13ab08c045b72b8089c04cc774b2e2e1e1e6c087c85543e1f83c1fb2faa639d8446809019265935db2c71d3250b47e1fe11e9c5a4a67d7f4cbd033e95827c0","ssdeep":"384:MOfF6+el4eTGrk8vX+cDPh7fHMn4nO0PWzZIBnTi2VwhRvPa5GpZ:rI+xvLPRMn4n3nTruEeZ","tlshash":"bbf28325a0247ef9b71604a4b96e818c302ebf58cd5f9a94b2fc7c1a17448c07e97bd7","size":35310,"data":"","first_seen":"2026-02-02T18:35:49.630693Z","last_seen":"2026-03-15T20:04:55.024349Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/715ce226495e5810.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bf7268b4a85d2cf070f0586c09025d","sha1":"2448629509897c42f8e626931fb784b4815086f1","sha256":"3295a2af1bf83d2cbe21a9d7b76b124e4815446752b089a46bae2db1a65fec95","sha512":"ce01a6dfc05a234d012b05a34ad54fe0ebf536403eb5dfd98694ce4de2046c397d6a9265f4144177b5f45c78be048de14506586efba782b46fa09fbd965e3066","ssdeep":"6144:4bRE8RQvF3WgrFXY+VheimqJHBmthwRksj6QLB/NY2BaUwpTdjeX6c:4A5WOqaBmsRptpJw+","tlshash":"adb43a647184b46066e781e9407f4809f2372d18d81da8a0f3f9c8dd77aba4cb563b7b","size":512397,"data":"","first_seen":"2026-03-04T16:26:32.998969Z","last_seen":"2026-03-15T20:04:55.156484Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/eae67140e739bf8a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c08fe9ec37a475f5088ca31b52ac61b","sha1":"28e6c1b12531189f820ab11ff88152cd522e8d35","sha256":"40c67df7ff2d1eccf9240d29814dd51ec8234badc4e9ab82ecc92089ca944ffa","sha512":"44a275de412cbc1af01c9ac7b3e420d94f1639de4065914cfc903e957377be901187682d14b570a5f1e32fef777d044908eb9c502f8bf2ecfbfcedadca10a2e3","ssdeep":"1536:Yuu8r0x9kn7k1uuFYjNT5zCLctDGPP6byEZjwx:YpGdZjfzCiDGwyEGx","tlshash":"7f33e79061556aacf6570195b56fd00cb02ebeacce0bc418b7bc3c792a148c4bad6fd7","size":53012,"data":"","first_seen":"2026-03-04T16:26:33.003519Z","last_seen":"2026-03-15T20:04:54.973978Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/accf940692610c13.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f54304db04496433b07beb8a07dedc37","sha1":"cae2db299cf5a780628c4ad2e2ae7b42ea572b14","sha256":"326afce1783fe02a70e68e44b20ab8c17d0bf08bc418d4dfea8b5eadb2198107","sha512":"3de05ed81a6cf07b61208850d7b3d6b9aa68fc506bafccd75144cbc18ee480f7014b35d2a7ae9f299490e501315b31a2a4c3a868ee6ae03dc03ffa03510b8878","ssdeep":"768:cdZfa4VxZhTD84cS6a9UkVBEydFszwiKrZRpTy8Y3GJnwxGis/0K5FaNDMQoawx:caQ7h36nlKZRRyh+wxRcLWBNwx","tlshash":"194319c577a1b02243a751e9445f140bf27dea39984c0868f251e8f728b5a8d86fff78","size":57812,"data":"","first_seen":"2026-02-12T20:36:03.631901Z","last_seen":"2026-05-09T07:37:36.90707Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/688e3261a170e82c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d785f903b3ed880dda3443db0b0506","sha1":"94bc3d7edf03cba2bbc9d9d1e701d13f71c54efb","sha256":"aa5fa196a32fbbcfcdda28edba4b1bddfa4b6daaa00360f74dae538ac06768b3","sha512":"06c6405b2d9cb690812272aa203d224c706906f81bd9251be95570576274445a2f7196b6aff054b648f74ecda9baca5ab46c08a4ccb53e2d395873e07820c663","ssdeep":"384:O7Cla6CWCmLgG4AYHfcseD1ePEbKDRb1Jn/hHh4vTAfmUb2ZznojLD4qtgQZrIuV:ZlaJzRn/x/2xCLD4qtgQZrIm","tlshash":"e103b5b572d4faa2029344f0d83f100af23d4c7621adb4b0a7e4dcdb799458d92b6f99","size":40063,"data":"","first_seen":"2026-01-24T14:43:36.951166Z","last_seen":"2026-04-09T01:34:11.858554Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f46b8a1c73c0617b.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e1e61acf0ec39c69b58f66064941ce7","sha1":"7fb45e5309b2afed15a3461a3b55dab37b95ac92","sha256":"d1f0a82a2adab5ceab302a8ef6af408340d90f0184b789a7160d6de4dd9b9bc1","sha512":"7a5be9f39ac0668184ed3ad8e2c078da5b6787cdb2245b085f44fc7875b61fdb955d1c0294f43fd76134cbbd7a9b1f9f7db74ee2536ca56c7cbaa410c7e03917","ssdeep":"768:q5Mvs8TRqnxRxdP9lsJr4fKT1LpvwutT8kxBMh8iuX:Y8TUnDxdDWr4fKxLpvwutT8WBQuX","tlshash":"3023c5e931d5f48107a780e5c42f101bf23e4e36149d64a0e3a2cde979b495de273faa","size":47590,"data":"","first_seen":"2026-01-13T13:58:34.511503Z","last_seen":"2026-06-10T03:58:04.114528Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/44a49465387680bf.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b31a3c83f986a04ad80c7618ed0f42d","sha1":"cb43d9dd4b664637f8e7d34f8db097765fe2fe25","sha256":"c0aaea4c727db1b4550ab636e2b695863eabb46f341593d3bda8fa723dc2902b","sha512":"999432ead19eb74fbc858cb8cb94498335e2f8c63051182d005c501242c92b174adc660e07c6ceb9f8680781d82ebd9d8424802504e087d4aa30b39e0727ccc1","ssdeep":"192:zvnaPno9CUmhVMgDYKWyqrmAs5ZvZjkVDaXgm0WBFpoNv:zPACCUAMfrmAGj5NBFU","tlshash":"5412a50b471932790ac602857e9723f2773d684d72f5d1a09c8e461c23da67aa93ffd4","size":9785,"data":"","first_seen":"2026-02-01T14:00:57.558496Z","last_seen":"2026-04-09T01:34:11.861683Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e58004fa60875eed.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cad4d7ce3ebd47abfdd10fb1ab546a33","sha1":"702aec8e78dc8eda208fa90b29db007f2bf27075","sha256":"c7ad2c547ebca4eac43072506d3ef6f47f2e79ca1e227533a709f8f6244f97ed","sha512":"aecaac8ddb0cc3eaf89e357b85a4b266b5838f3b8f0e6ad4da56048ae3b8ca0b191380161ae4612cd7302bdf740b15a6c7905ad0da21b69047c3239c873538c4","ssdeep":"","tlshash":"f421318d4201ba581013578cb0e22760767d40d9d4ec806dde9d0fc8a1bb138903f9fe","size":1386,"data":"","first_seen":"2026-01-13T13:58:34.409252Z","last_seen":"2026-04-09T01:34:11.905641Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4694ccbf99661862.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ec2b2d9a695fb9ba9373c1282b593b","sha1":"7cca762ca195d4c173c33ce95e9ff64237ebe964","sha256":"ef81277a962f81ed20594a1778caa84d15449f34a395f4fd9cf39c48dd7c535f","sha512":"fe1df58d8ba5e748b6f61f4d2e831e01cbce5755981f18bb2d383dd74381bc5e84977266f78faeed46fe599cc9e8714ba8572d61ca3620e113a5cd9fb5048f9f","ssdeep":"","tlshash":"d9317316e5000bec031141a2a07a2af8b06d1118f3bb4d96994ec56a62bcf79f13f3b8","size":1610,"data":"","first_seen":"2026-01-13T13:58:34.496506Z","last_seen":"2026-06-10T03:58:03.988804Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3f2df0a9f0c8c9b6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7cf8464e534d3fe0cfdad902d310489","sha1":"b947e51380452c9370cbaaee8cd1915d6573423e","sha256":"8177effe603ef1689fce7859cf54d6fc4afaeef8430affe1c7c280818dcf641c","sha512":"81707a3c7ab33a871430e6daf613da508a3e628d6a4a8774a1b491ca74c7498678c97026ad579f347f31fd816e74060626b3599ca02a2dc6beac91ad3ca2ec8b","ssdeep":"768:s6lPc9kgRKuW2haDtDR6P+WE8uW29mIQ755:Plk+gRKuW2+lWiW20I655","tlshash":"9a03e92fe75a237707c302d63acb4adaf37aa05837b69594c858c24c1396f6c8337665","size":40016,"data":"","first_seen":"2026-02-12T20:36:03.452939Z","last_seen":"2026-04-09T01:34:11.900083Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f7465db492e6b331.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"068cbd1460639fe52fd985eb1332abb0","sha1":"0331a048e43d60a4734bfa03da0c6910abae6a8d","sha256":"d9441187b773b5079a46cbfce0184910c03419db00764cebb77fdaa86f45c015","sha512":"8218736bf1159c112a8651fa2e635b8016f9e177b247ee58842749176ff175cfe9e7abb9aea2d20fb43ca32975945fe51900d6a86079d757f9cca7109015d9ee","ssdeep":"384:nRVsrrjRG2RR7EE9Ci/ismVOo1hfqxPCz6f:n3IrjBR+E9CiK+ozfqd9f","tlshash":"208298d8b292b06156439425853f120ff23f7818614e5458f2b9e8e26e78f8d216bf7f","size":18451,"data":"","first_seen":"2026-03-04T16:26:32.842746Z","last_seen":"2026-03-15T20:04:54.994696Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f27400af9f76e77b.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"003f8a3965dd4ced7a6ec212f73491f1","sha1":"0c4a0108df085fe9075a9518af64d70510ef9875","sha256":"e4ea5fd724b5834f0304d20cadf1d8609be15e46626c234cc6659ec302e05c60","sha512":"7ede1fbf78b8902ac70db752613abeff64bade0a66c5580c4795d76da3d10597aaa3ab87e978965eee95cf57e86a75f91a28f5ee08a821a8acbb096b7998aa49","ssdeep":"1536:qYjNT5zCLctDGPP6byEZjwouu8r0x9kn7k1u5:xjfzCiDGwyEGopGd5","tlshash":"b933e79061556aacf6570195b56fd00cb02ebeacce0bc418b7bc3c792a148c4bad6fd7","size":53012,"data":"","first_seen":"2026-03-04T16:26:32.919048Z","last_seen":"2026-04-09T01:34:11.855794Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/526f6e3794e468d8.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeac2755c3630d743a8d6a94b1c01444","sha1":"bc228b9d866f55f5fc42a9b6e3a3b6c3fd8c6296","sha256":"fc5c81254352974959f779c07e62e6a8a004a8563a794f6a6e3561c8ab0496c1","sha512":"feba86304ff673f1734d01ec1f81f978374753bf8da8098e80835495be2069ffb5f23afcc5f8b64e4df4686d01c3d5dee626890175e7687907f99169391827fd","ssdeep":"","tlshash":"4e71b51bc31872a707d311493eda02ca677aac4d7394c8a8de7c421c33fe1688637b64","size":3544,"data":"","first_seen":"2026-03-04T16:26:32.933929Z","last_seen":"2026-04-09T01:34:11.884827Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/37bcdd8cbb92bee1.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bc8257e12e6efd6f13bd4306f0e6641","sha1":"6c686776674307b242c7fd89da354c2686a33b6f","sha256":"9dc7ea545eb3b017d9f4a753779b3ed63895b76c29d643a23c10703e525fdd64","sha512":"4782d1f38fbba246b6f5856abc42b5958727a20f707bb256e008581a9564bd60ef5542d0cc9518922f5202615333d080f5a429e5ec8dceba074ca3c68bc23fa9","ssdeep":"","tlshash":"624154566318316c47b7050862a667dbb73c5124a314c678ce9d852cb3e6ab8c2fe5d2","size":1932,"data":"","first_seen":"2026-01-13T13:58:34.46114Z","last_seen":"2026-04-09T01:34:11.92593Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3ac6af060d8f1875.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28f8e2b2cf927da287390f7329f7dd4d","sha1":"2ae344339647c5cc33c06beff790a01b60b2d4a9","sha256":"ce46eaa429de0321592363232270431494bfc2661b2bc89f9d10f85f5c596bbf","sha512":"dd71baac3e3f8c119f3025b5da9d13a3fa4de5abba955fb33f32d58cddc0581d50e189f7c660a73885a0d4b5bc64d1acd4f82803c6ebc4016dec5795b29ab1b0","ssdeep":"","tlshash":"29e0c265c459f58820843688687186ee3a192025d5dc245bcaea0bb4a2f5a78808c26c","size":297,"data":"","first_seen":"2026-01-13T13:58:34.523199Z","last_seen":"2026-04-09T01:34:11.900623Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/eae67140e739bf8a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c08fe9ec37a475f5088ca31b52ac61b","sha1":"28e6c1b12531189f820ab11ff88152cd522e8d35","sha256":"40c67df7ff2d1eccf9240d29814dd51ec8234badc4e9ab82ecc92089ca944ffa","sha512":"44a275de412cbc1af01c9ac7b3e420d94f1639de4065914cfc903e957377be901187682d14b570a5f1e32fef777d044908eb9c502f8bf2ecfbfcedadca10a2e3","ssdeep":"1536:Yuu8r0x9kn7k1uuFYjNT5zCLctDGPP6byEZjwx:YpGdZjfzCiDGwyEGx","tlshash":"7f33e79061556aacf6570195b56fd00cb02ebeacce0bc418b7bc3c792a148c4bad6fd7","size":53012,"data":"","first_seen":"2026-03-04T16:26:33.003519Z","last_seen":"2026-03-15T20:04:54.973978Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e0e9b5475e499cfa.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e0821ff365695cd3fb425fa2397a04","sha1":"54a3ff065fa647f12b34903c79cf249e17738ddb","sha256":"5f0508e16fb7d459650d9137fb1cfa77960024654903ddff15dc7639af8a1194","sha512":"1d13ab08c045b72b8089c04cc774b2e2e1e1e6c087c85543e1f83c1fb2faa639d8446809019265935db2c71d3250b47e1fe11e9c5a4a67d7f4cbd033e95827c0","ssdeep":"384:MOfF6+el4eTGrk8vX+cDPh7fHMn4nO0PWzZIBnTi2VwhRvPa5GpZ:rI+xvLPRMn4n3nTruEeZ","tlshash":"bbf28325a0247ef9b71604a4b96e818c302ebf58cd5f9a94b2fc7c1a17448c07e97bd7","size":35310,"data":"","first_seen":"2026-02-02T18:35:49.630693Z","last_seen":"2026-03-15T20:04:55.024349Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/715ce226495e5810.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bf7268b4a85d2cf070f0586c09025d","sha1":"2448629509897c42f8e626931fb784b4815086f1","sha256":"3295a2af1bf83d2cbe21a9d7b76b124e4815446752b089a46bae2db1a65fec95","sha512":"ce01a6dfc05a234d012b05a34ad54fe0ebf536403eb5dfd98694ce4de2046c397d6a9265f4144177b5f45c78be048de14506586efba782b46fa09fbd965e3066","ssdeep":"6144:4bRE8RQvF3WgrFXY+VheimqJHBmthwRksj6QLB/NY2BaUwpTdjeX6c:4A5WOqaBmsRptpJw+","tlshash":"adb43a647184b46066e781e9407f4809f2372d18d81da8a0f3f9c8dd77aba4cb563b7b","size":512397,"data":"","first_seen":"2026-03-04T16:26:32.998969Z","last_seen":"2026-03-15T20:04:55.156484Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3a6b01cfeb015c57.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"849d648c329865aa5ed3f1e2c14d059c","sha1":"880d8199047079dfaf661f6acec42a9637f7c6da","sha256":"1b00d35ff042cf7523b58bd3c8cbe2f2a281d72d340cc0733de0c702582b8ea6","sha512":"36dcd98a083317d0b14f908143dda335a9c93fbdd9bf73ef43245dffab6f719a6abddced0a10eb156cae1b4b1a9e52f9da309873cbdb2cdf30e5aebba284bfa9","ssdeep":"384:cJsgw7D8RoKa9otOelHwd9OcrqkYPE4cZUWu67YrNg76Y9K:cJkDKtOelHwd9OBM4cqp672KHK","tlshash":"81b2f9ccb193b0201663925650bf510bb1bd2d5ca58ec058f576d4ee2ab798d6333fb8","size":24426,"data":"","first_seen":"2026-01-13T13:58:34.519367Z","last_seen":"2026-06-10T03:58:03.92801Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/9b2ea8df5b4476c5.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"228fbf4a9ff27aae2ce0c71b7cb71ca4","sha1":"73e6c3249b5c04e36d45c303667adc096443d39b","sha256":"34364711736fdb7a1102c064cf33a618c556d83c2361b06b4df1d214ff10c109","sha512":"5dbe7854729f44233d486e5d7eabcd1beb556feeda537c7c74ac394497a6fcf1577fa2cd8f4298462b6a10a3dda081fc07583f70d25f91d9d2b1e1dfb0a36074","ssdeep":"1536:mkcDwFijRV1pOak4axZPh1HEmEMoejTUGwL3vaaCs0uhWhkS22YgKID:/cl1pOVRxZPh1HEmEMoejTUGo3vne","tlshash":"1fa32a94719333670b8fa2c5586512489e7aea64404c581ff6acade38891d8e73fff70","size":99529,"data":"","first_seen":"2026-02-12T20:36:03.583419Z","last_seen":"2026-04-09T01:34:11.866046Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/8ae6f7be38dee493.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1d7ce5a2f251f131abbe8bfa423023b","sha1":"b36f7df6b59b4eaeff16a5bb737f48401140d7a5","sha256":"f0b7d7d15e76e1fd0f71420c765220985d0097295c17d882aba1c30a31f54c96","sha512":"fc8376588419d7f170a556cacd68eea37cf93d1922bba16696a0ee78abfa7c2ad85da13c8bb19e6c9520e8c04304ee37eae02495ad28f8119345673f7e477e76","ssdeep":"","tlshash":"8f112588d70d09a80997b33275c5b49175a019d8d0d6401be9df8d3882b5f2e96db56c","size":1008,"data":"","first_seen":"2026-01-13T13:58:34.513369Z","last_seen":"2026-04-09T01:34:11.906493Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ed6a21b61884d08f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0442542e692edaa8fc0e24f76ef11257","sha1":"6e09219f74d7899ff1af0669bb6f0fc50c99fe2e","sha256":"ecd810778e01141a8506a8c43ae45efc9af39db9dcee69d63703908b6698b3f7","sha512":"3fac299901bf52b2e70581205a980a53951baba329e7e50ce4828f3d0abd3881e7eddccb53b60ae41d85aae080385d3fbb2757536d74986338e921142e6e69bf","ssdeep":"","tlshash":"46e0ab6cc0114a691894c49c7ca8a22834297c3f81c99418fafccb6c7536fa2b11969e","size":434,"data":"","first_seen":"2026-01-13T13:58:34.478837Z","last_seen":"2026-04-09T01:34:11.904898Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/bd8134abc73ad514.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"165fd581909f5aa34a58fd0f0e2227ba","sha1":"47c3422224dc5d6e6a4c0ca212371377b5906bc1","sha256":"081a4e70046edc5780986ed69069643bef45245d59715cfea62414327886561e","sha512":"d8ca8ad25cc830ba7d27f152846910b66934cf86735f6e0dc9542310a63b4fe3707767921c9600071a75f576e427cdb839ae2be85d22766e221c652984ad970d","ssdeep":"","tlshash":"00e0686d0a456ca82a01e69cb52f57a471b7209e40ee6800da8d8efc6532f3e0b46016","size":379,"data":"","first_seen":"2026-01-13T13:58:34.516843Z","last_seen":"2026-04-09T01:34:11.881115Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4995390318262d42.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7e6d3b316671b804c05fe744c95765","sha1":"ec3b1e8ee00d6f9de4bfaad94e92c37c51660627","sha256":"92e69287b0ef61598b2880341eb4a6f73a83db8526723f8528761a2d7f2f7b6f","sha512":"14eeb08ef1ab3e3af27e167f9b3463e531d56f4283de18ffc940e37e7a747ef5d2fad361e8a72539139654d1df0a0e4331cdd842bb8d9a04f8769ddf5061afee","ssdeep":"768:H940K+YkVEWBxWj2VNofASv14MM9cYg5QDy:ddxYyBxvVNMASypCDQW","tlshash":"4ce2956062016ef8b3a704d4b46e854c701ebf9dcd0e8958b1ba7c1a2a84cd17ed7f97","size":33838,"data":"","first_seen":"2026-03-04T16:26:32.988955Z","last_seen":"2026-03-15T20:04:54.995413Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/81c836af9f9b281f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88fc2741c51a428c589e5dd95f2e6593","sha1":"27ce73922a6530fdf92133454b54e4b6e8624009","sha256":"52f1bfbc0f217c64485369eab5c4ba250b22e8bad9fd90cbe1f5ae0b13df4704","sha512":"6c7c6d48e3bbfd92965763bbb748f5f7124c11dfc9c1a5e124b0392e47c95d853ac2a96d9db57fdd9b545359e9a030a2036a42d810bee8bd93d1237b0c3354ec","ssdeep":"","tlshash":"bf31a80d484b4eac5921663035c37f6e746c1cd291d6a805c97d877832bbe4cb587e29","size":1704,"data":"","first_seen":"2026-01-24T14:43:36.877112Z","last_seen":"2026-04-09T01:34:11.933103Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/97a6f3ed35a1c469.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7efcce7ffefb3b55e70c5de14600b04","sha1":"b056f927afc51decab632ca5d3f99f109e7b7031","sha256":"0e1e093766cb3bdb8388d65d9ca904ab9df9157691a3f647ffc8f29633968273","sha512":"094c76eb01962990a5ccf554e1ee38f0ef2925f93777f6e7ff2c4adb73f5dc38fbe6215ca587d406daed1885fe2cb1af099b6f8cfb9df703a7c6c939bf0644e8","ssdeep":"","tlshash":"9e41315a8a44f6a8038f1009fb77d61079b8030cd1e5e05d6dde0790a2fe3ba943e7a9","size":2035,"data":"","first_seen":"2026-02-01T14:00:57.577467Z","last_seen":"2026-06-10T03:58:03.946224Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6cec91c98d688ecd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee8b38c151c60720027b8e277413502","sha1":"2d8ad0c1f655fa300b6fea3ba9636173615ca100","sha256":"0924557938dd8e1db1e02ff3a5f83c89f52b7ddcf0fbf696800089ba4901d7d2","sha512":"45347972db7f1c682aa564fea4cfda5fcf28fd337d665410156779ea58e5a729537d1ca71303ec0c2ed09f90973ed986929be55176deafb6b0ba846d8b794441","ssdeep":"768:Qf4TuqQAQhJ0yB4du3l72F5UgsXE2pLp+fhycJsK7KGMM8GoVYqN4V2qN4IkZUNI:sAQ72F5UE2D+pqOWYJ2L/UPsXBVZJ3","tlshash":"6da3a7b84560aaec765a09a4706ed19c701b3b9dd9d7ce18f4397d4b29800cafbc2f47","size":102952,"data":"","first_seen":"2026-02-18T18:42:32.557713Z","last_seen":"2026-03-15T20:04:55.07453Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/674c46380ebb8de6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d213c5caa7f7c5ec4b70179cf00316","sha1":"001f35a9db42d0cddf266b2d59c95b9ce311f235","sha256":"8ef13b905a69d146ae51e0fd29a856f06416971a0b6571d1205cb50708aaedd6","sha512":"9ecb26a29dd8dff7110ae8f2baadcfb0ef1f028b0170e02c34178b0993d823402c6db4e872681906862615641ddab61a046a80e8ce01a8320e6425cf33aa31a5","ssdeep":"6144:LIgbOu7Li5xCA0Ro0OKn7Ntb9YtJXQp2JM/RQO3lH4i+7OsT:LIViLiiA0CK7n9WJhi5QO3cXT","tlshash":"bf74f1f283d4f5c96d530f24a8991a241c1879b7eea842d6fdaa814ee1717ccedc8c61","size":338343,"data":"","first_seen":"2026-02-18T18:42:32.568258Z","last_seen":"2026-03-15T20:04:55.075192Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0763e3794b994210.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3c4d4847343f6c24d2b991b2ecb1812","sha1":"e2161337d967fa10956072b1819bab01df94ac66","sha256":"d2c8380b27dd69f8e1381c5fba8dd65b17ca288f8111fd1f29031869d52c334a","sha512":"d6fab146dab6958bd87dac9cb57c9e3871f82e5da7b69aafc28820459f570f5cb42a79d876bc731403637bc22567eab7887063d21c6ffa11ba510906dc8ff62d","ssdeep":"1536:QXJpCuoWxmSznAYA6J2Apyobba01bytBKbaz:OpALknAK8OEtIez","tlshash":"a0632a647980f8a4639781dd803f4808f1262d1dd82e7b74f3b5d8ae27e6609b53377a","size":72361,"data":"","first_seen":"2026-03-04T16:26:32.982713Z","last_seen":"2026-03-15T20:04:55.038845Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/5c2dfa3698d55f88.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c312afd971809bc3db9e5eaf65868390","sha1":"cdd82208f11ed1d19aaa2bf28cc1e4d0a8c1f34a","sha256":"66f9a1dd8a15357102bd6b4f4a566df16ab15216f7b3c35bc7c9078a59ed512b","sha512":"4e803ee0523cbd43eaf547b43af59622b2b328be96152cc63e968812ad2f9307840e856048a5f5080594c2b3ba39c31b3b842480a2b1c0e5be81744bf6afebed","ssdeep":"384:bbga4IZDHYamPknd8llyLzJFtQUVA/z8oWDmuRHlZ:j4IZDHzO0LzZtAwXZlZ","tlshash":"11c2b6b27395fdb212db81d9c03a1005f2650c3521ae24b0b395ccef769dcd992b6fa9","size":27948,"data":"","first_seen":"2026-01-13T13:58:34.388892Z","last_seen":"2026-06-10T03:58:04.070464Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/97841cb0243dafee.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2efe6888f929f1e980768e4b486ce707","sha1":"877f47cafd1612f886f3282fb8e38439e06783b9","sha256":"62091c00e253fdc26a7288ff4c673a87b2cb686b06e96a1cb8523b10ba047505","sha512":"79bcd52e6d0e9205993bfe51d0447429aee1f200574e9f5473353a7b6736578aa2eee6e244df354939641bf8dd7db44bba878e7f950041cf4245021141aaed7d","ssdeep":"1536:DQm8KN44hUdGv/I7w2dXeaYYKPILquEasU:UENOuA75uktB","tlshash":"9b6319d97282f060639350ad803f8507b13a7c29140dbd55f2aed8e46e7599ab07bf3b","size":69228,"data":"","first_seen":"2026-03-04T16:26:33.00223Z","last_seen":"2026-06-10T03:58:03.963325Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"865456e69951271672c6ce341f318589","sha1":"454b82d31a98b93ab6e70998a971f516acd1593e","sha256":"8444d38fa8e39815994bc1a639685ec93fb9c29f59419c4a2fd58857f8ba8ceb","sha512":"be6e3ae71c7f4af50204be3e1e108b15be95d06fa3bde1e11f5acc2ce64e9cf9fb42e873d351f6ea80f920b575bb4dec8574ef983b9901a32aff86f8749b3e30","ssdeep":"","tlshash":"5031c61ebc19df06ec3e7c69153ede7b00cc89778264ddb941dece080a469b627d5882","size":1628,"data":"","first_seen":"2026-03-04T16:26:33.043104Z","last_seen":"2026-03-15T20:04:55.235045Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"884d0aaef37ff8b19b0e946f8252bb32","sha1":"691729b8c4769cc6a8720c8750d99b43e4ca0500","sha256":"5c9ee0aa77a8086acd8d83b5a7199f6d102dc0637be8ef5314c3a05baed96218","sha512":"304d7be32dab073e95141c98786fddd888a968b350480f09772f38b7986197db79a912a741de467d3698b75aecf27fa6d10afe4684c704d1b9fbf0f464579945","ssdeep":"","tlshash":"fa313a79b005fa8abd9f39a9503edc7a208e545f0be0afb44296cd68170143e3783ec0","size":1855,"data":"","first_seen":"2026-02-14T14:49:07.62767Z","last_seen":"2026-05-09T07:37:37.13185Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/32e9bbe48d19ee5a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54689edd9dfe6b8710a3cae385818081","sha1":"3d200e7d77537c36f1d3b26b972b94dd3e655c39","sha256":"1becb04d1ca44d058451cfed76e00c7a6e50936b5babd712c9fd3ebb94b78996","sha512":"33f7299897ac772ff8297b840836ddd7f9b9f2261d8098b358739737feda95ffe41affde5e4b84e6c532841cbe64ac1685fefa20173b87bf6ce434643d111455","ssdeep":"12288:oJ3yJkto8gLBoJn06HCzgZf92vvc2R85q+O:aIk5yBoHmAf92ncH5qz","tlshash":"47e423263fc5153eeea846bcf19e0e942b2c5a2c5454eb3510c22db05a9f940f63fe5e","size":674753,"data":"","first_seen":"2026-01-24T19:44:03.151704Z","last_seen":"2026-04-09T01:34:11.954673Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ad6b1ddcec4cb5a8.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca8f72b0dff0b15a2220eb717b98488b","sha1":"2bc25662a117a508adce9ff8df2e544624819aa6","sha256":"fa54491e1ebe956f011cca158d6b94328f6596e9f3373dc942dda8a3122679bd","sha512":"db4646dc6dadb068f9f74ee85ce47beec97e71cbc1c97f5ab36dee3c9b08ebeb652f4d710ed1407dd37f0f9156957a0b7674cd520d1625d58686191f3511015f","ssdeep":"96:At273n7i7i7HSK7ViTiEkMxzO2k+NepInmPKI+j2w1Ux4gxaPDvo04n+MLSObghu:PLWWLSK7VWVxg+nqR4g4bvt4+Muh58","tlshash":"37b1c9179364319a0bf70268a19b39d5ab390c16b301c884dc59422c73ee5fdc77afaa","size":5383,"data":"","first_seen":"2026-02-12T20:36:03.607191Z","last_seen":"2026-04-09T01:34:11.878899Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/03fbc1250bf4a7b6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"441f8c9d4b02e80a247aae360e3c00e5","sha1":"b9927e735deea0cefb878c0198ef58cfd561e589","sha256":"5509a68afac0dc2dc6e67611fcb9c06e539408c53a492b3afd0d9a4b9df5184c","sha512":"45bf68ebd3e1293fa540164ea17f88653a1b7bc2d20c3eb6acaf23f9948090c643984ebd69f7d428529900a4d75f746cc22ab344613d101cf25b28e7076beca6","ssdeep":"","tlshash":"cfe07d9a100784e809c77369b275468830bc20e8643f8032507d846c52b626c9289440","size":305,"data":"","first_seen":"2026-01-13T13:58:34.410052Z","last_seen":"2026-04-09T01:34:11.876408Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3af414076e40d6d2.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f552d8fad4c6e35e87fd003150efd19f","sha1":"277e39792dae7041e8d5e200f27cf10bdf0a9cb3","sha256":"1a04a86e0680d042931561c4a1d5007b0f57c8d52d4315e92e67afa0da7f2853","sha512":"00f73cccc0daa26b38a20dfaa1d2fb84eb26590254bef9fb7eabcb20a7eba519b5bdfa0882d0153b7257015a81626092efc58270b4f373f2ceb8a737a0e2c1da","ssdeep":"384:OBZVn7f9RurWFNhNS0bHygpWqP4VA8/cmmoBPjUHa/Uk7u8fnxDOnRXcPVnX:OTVn7VvFNhNXCA8/cmzBrUHackq8fnxV","tlshash":"48528403ba5c373e4a571363b9ef299537bcd12000b4e04555ba85288bbaea6c1f71ed","size":14101,"data":"","first_seen":"2026-02-12T20:36:03.490194Z","last_seen":"2026-06-10T03:58:04.103394Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/56604a82a993fe8f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eb6e3c929df6cbe6bb340a68a27a591","sha1":"46c44cd8619a39864e91c811fbf91c6fa9270d7e","sha256":"904c4dc09a88fd81921baf9cd2fd908e73b62d1f6716c6795f5b0b6cde73ca8d","sha512":"141360b9ac89324ddb713a8950ef2b1a4b604f72a0bae0a182d4760f9fc2b5c861dd7e890b3a6ba858d4b1cf3edbb907698707f88b3c2035db1ecd5b5ee08928","ssdeep":"","tlshash":"4631a50e2614a97a4b40027a398bea4670fc24c50577bc14e9fd434c13a87bc72a186e","size":1826,"data":"","first_seen":"2026-02-12T20:36:03.635175Z","last_seen":"2026-04-09T01:34:11.911881Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/943a283ebf65b52a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"461d1ce102877eef0868117bd9268262","sha1":"824a289131cdba8a37f93513720cc037b753e6bf","sha256":"e82235c49191583898d3a6171e1f4f58740785bdde62b19b2e574da57ef3af2d","sha512":"20efb0c62beba2376d261cca1aa63e012387c4709d4456ac5f3c59256c996fa2bf8e3eccb7e0a2b5a958b97da579671c5f4b04d4578a73151e8955b166b21729","ssdeep":"","tlshash":"821125d38f298c0c1545d33af089f055ba7ae80a98fa04089be94335317bd79f36ea42","size":1014,"data":"","first_seen":"2026-01-13T13:58:34.457884Z","last_seen":"2026-04-09T01:34:11.904265Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/aee865646d5860e1.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"219ef309b5647971e066190aae0f3412","sha1":"bef77b2f601015a52c9e4848817f0cf7c1df2ad3","sha256":"e3badaea9d2c9c08613a447a709aa55ed1d67d579989a8f59a21b1185967ca56","sha512":"a47993aacd8833eb12e01231e30e05957b7a49ee93b46546c254243b9e822dd3aa5130a8455d1a2b47e1b333faab29efabf91da4488da132ed3b3d99272d0f29","ssdeep":"","tlshash":"9ad023150113ee0c100760cc703995557c29753211ccf009e05d09735238f6b7191274","size":228,"data":"","first_seen":"2026-01-13T13:58:34.418244Z","last_seen":"2026-04-09T01:34:11.884277Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3b840cda84ec574f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"746cdd8bf6ca4339d1726cf94a08e1d2","sha1":"c9edcce0b291e97883b40461e076a108ae120a69","sha256":"a146c922f786b6893e4708c51eeb308cca13f1c838dfef5f42ab89a44179815b","sha512":"a6b3344e364ee3ce591e57fc324e302e1fc93253f956f3cbcf56b093d2230be2bccefcfba5615c2bdca9f310b891f4a9533e650438155684935c5ad68543513d","ssdeep":"192:WMQVPsLQ7FkcfP8Q4U+XkXvN5mNaKHVeme7FO5B8fprfUvXJASuit0l:Ss+8zUiaNANx+Q+pbUk","tlshash":"3532751b962031be0693fa93665f31937b3af0e43a02e65ccfadc0581399cba45355f9","size":11104,"data":"","first_seen":"2026-03-04T16:26:32.864424Z","last_seen":"2026-04-27T08:35:58.647433Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0aaf085a7f1a0239.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6280fd173e475fb620e7ac1222571eb6","sha1":"07f64e6f4ceb0a0f3449381760971e09744b55ab","sha256":"acd430bf0397e22d565867188fb1373710eb3020e31d68f9e53ac1581d05da5c","sha512":"4728c9b6154b0422f8bdae7e63a6b5e80cadcf272d35b21b4f9e14227c94ca8ce7a47d161eabbfa61e68882f5010c069bfae4e8102f67a771131c3fdb11ca68d","ssdeep":"","tlshash":"4311231e95194a0a0d99c5cc34de662870dced2b4dcb04056ceccb9c32bbf41f1568eb","size":890,"data":"","first_seen":"2026-01-13T13:58:34.4619Z","last_seen":"2026-04-09T01:34:11.946594Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/20fc3cebcca07a0f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fd180cf72e774d113a37f469f1b13f4","sha1":"ac8d3e2f0c06540fc18fc98e229af863d6209b2b","sha256":"5c11ab40ef3aa48c6e96a6eda4cecd23556e87ffff1e9010308ddb12c70f1252","sha512":"f67e49f324ecc6a55cbf798a5b097a945bd843622cbfde7bf6ca58046033c27bae8668fbc8c134fd95d93759ea7da115c9c70043c06ab0dfe98314be56b6066a","ssdeep":"768:hbEe+KZaqYIv59w7varlkGYgOvJQj3KlDo6mlZsZiISnD3djM:3+KZae5aallYgOvJQj3CDo6mlZsZiISa","tlshash":"82e219ab3111f47246ff51aac02f1b097238119e570c84ac793daeed26b0e656397f39","size":32013,"data":"","first_seen":"2026-03-04T16:26:32.834645Z","last_seen":"2026-03-15T20:04:55.107387Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/674c46380ebb8de6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d213c5caa7f7c5ec4b70179cf00316","sha1":"001f35a9db42d0cddf266b2d59c95b9ce311f235","sha256":"8ef13b905a69d146ae51e0fd29a856f06416971a0b6571d1205cb50708aaedd6","sha512":"9ecb26a29dd8dff7110ae8f2baadcfb0ef1f028b0170e02c34178b0993d823402c6db4e872681906862615641ddab61a046a80e8ce01a8320e6425cf33aa31a5","ssdeep":"6144:LIgbOu7Li5xCA0Ro0OKn7Ntb9YtJXQp2JM/RQO3lH4i+7OsT:LIViLiiA0CK7n9WJhi5QO3cXT","tlshash":"bf74f1f283d4f5c96d530f24a8991a241c1879b7eea842d6fdaa814ee1717ccedc8c61","size":338343,"data":"","first_seen":"2026-02-18T18:42:32.568258Z","last_seen":"2026-03-15T20:04:55.075192Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/20fc3cebcca07a0f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fd180cf72e774d113a37f469f1b13f4","sha1":"ac8d3e2f0c06540fc18fc98e229af863d6209b2b","sha256":"5c11ab40ef3aa48c6e96a6eda4cecd23556e87ffff1e9010308ddb12c70f1252","sha512":"f67e49f324ecc6a55cbf798a5b097a945bd843622cbfde7bf6ca58046033c27bae8668fbc8c134fd95d93759ea7da115c9c70043c06ab0dfe98314be56b6066a","ssdeep":"768:hbEe+KZaqYIv59w7varlkGYgOvJQj3KlDo6mlZsZiISnD3djM:3+KZae5aallYgOvJQj3CDo6mlZsZiISa","tlshash":"82e219ab3111f47246ff51aac02f1b097238119e570c84ac793daeed26b0e656397f39","size":32013,"data":"","first_seen":"2026-03-04T16:26:32.834645Z","last_seen":"2026-03-15T20:04:55.107387Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c879e9c703bcadf3082a26e2101814f7","sha1":"080a892b981e4879a7a3f059bd547b19c9ed4c3b","sha256":"6fa07038294b4bcbb5c74878301963193b706ad975d7bfec46c9dcd164d1ba4b","sha512":"4ccfc2a7f40b86455fb2e25d9c62811ee47ee7008301adea6ab15106a673149904d476122ea89d9a637180450a9496288dcd3bdbe554c01d27f5a94c6ad79c6c","ssdeep":"","tlshash":"1ac08090cc42cc1dc6670f261c3a1c3521dcc574074595469dd5dd291985b3115b5d89","size":178,"data":"","first_seen":"2023-11-20T04:06:34Z","last_seen":"2026-06-26T20:49:39.694943Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e6dbf1a906ab405043a46cb8b3fd255","sha1":"edf0cdcf0236077b003baa80cdf266270b9bb56b","sha256":"5485b6c67d9f1d8a61a8a1eed63783ccb6f78c903334f140843fbe235c2eddc6","sha512":"16b105fed6b2b3d7051a20d13bcef0094b00154eb7e2b650f5918288478f6d1368b0a04dd2dce1c9fe24eb84f2bdb2fa0d427943656eb63800625dcb1fa0afaa","ssdeep":"","tlshash":"1e41ef865e25eecdc3c68e3556fa3ce814c8c69642429c2ae4edcd542247a7c6ef0f61","size":2298,"data":"","first_seen":"2026-03-05T13:04:34.976256Z","last_seen":"2026-03-05T13:35:40.373747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c5e3438eba1813a67f8af6b0c99b540","sha1":"a219edcd8cf3f67a1df67c3557b1295ce7a6db96","sha256":"6eadc028edf7fd7edbf4a98ff34038c0b84cef471e1d34b3d3d5949b464c3bc6","sha512":"a1d169bc96114721d7b35217e9bb0cad6ee809704cfa5baec564b7de6576f1011f59a5c845dc52086a358fe850cfd7c71df74d19cb20f49691a63cfb6e2eb58d","ssdeep":"","tlshash":"55800470c0401c15c07340531c341105015d400d0000074053505544d0111055545dcf","size":35,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-06-26T15:08:48.687498Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/199ceb4a5fb4be0d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78cd840e95725cc1f44ecd94b513516c","sha1":"7a80b0c0d4f14fefcbde681e11464c993f6c1815","sha256":"d3d1cc68154d15344be67f704256285c447c1277fbe13a69f4559e5795001915","sha512":"ae33f4d1693d42e4c02294ebaa252fa8e54bbf96592ce3aa3c4d9c0caed3ddf2ea9632e8423aa6f911fa33e2460e84fde9f457ab681053a26558192faa2fd8d0","ssdeep":"1536:OQe9fxkVtS4sMFKudBi6Wjvnvj1CJXuSzHDfp:q2BiVrnvjaDx","tlshash":"f7731c7061646ef4b61f41b8f06ec54c341d7eacda6a9a54f3b87c2a5b048c03e96f87","size":75168,"data":"","first_seen":"2026-03-04T16:26:32.912621Z","last_seen":"2026-03-15T20:04:55.101689Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/56e67c9087d6a5c8.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a07820d50dd2e88aa5fdbd0a73c52f","sha1":"fa146c4e19d10c1ca936e7a343693326f3d10379","sha256":"73fc269567d6e33502c6d35cfbc3cbf447c2bfed6a5f5272f7825766f0affe79","sha512":"7508160876580439e1a08451f6182cf448581937ccf6ed7fda257645bb804a01ff4cab61af40ba189cbb8ec2f0bcc5e072fd8c6295f69e3d9a60e77ea52f0e7d","ssdeep":"3072:CH/apcwTasn5pRs2naYLlbskmz/pFdE/Y:CHypcwZbll4RxFdE/Y","tlshash":"72240ae83d55f6626ab302b710af1803b33c252b280d4d60a611fd9db57845fb17bf9a","size":213915,"data":"","first_seen":"2026-01-13T13:58:34.394009Z","last_seen":"2026-06-10T03:58:03.888508Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/2d3894a523d29c3c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"890051a2f5ba194f62e0a2247ed852fd","sha1":"90c5c10ea2a46d80ed2cb963e88fc201d9f0bd3e","sha256":"28e065269e96e9d4ef1367a70be5a2cd4327b1a12a611101ace84bd22f90217c","sha512":"081ee2edc9cfc6d88a02cbf810aa184cb5cd4dd59afcd654b638dfbedce9929c4635c3bcb82096521cb3100001f18879c32c90dc16a42c6646fd202e80293492","ssdeep":"","tlshash":"49f0dc6a5e11bba82853006cf82e6394b2382038d32c5508c49ec5b0a179b2bb22a198","size":469,"data":"","first_seen":"2026-01-13T13:58:34.419989Z","last_seen":"2026-04-09T01:34:11.943399Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winspin.icu/logo_megafon.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /logo_megafon.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"8079-19b2715ae78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZbqTFQC3nnS8YAs%2BlpqzpAk4ovOFa4eXEMRb4iW4Lc80TfqXG%2Ft1oC%2FKxR8upe1hqkdFel4MpJQBVDzL%2BccKypnikc3xrxH9UP8\"}]}\r\ncf-ray: 9d7952a848b4516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32889,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a81bdb4780524728d86286225a1cc196","sha1":"f8cd9b95b03bd4b2642714168b6c74cbad2be240","sha256":"24a4d9a9a326d8fd33c63891a0685eb46672109b2f685e985c7fa199d041d9b6","sha512":"65273cc06a7beb5a86d07a081284a6caf27b34acbc5e7bfeeea98a6cb3bcc9348486ec8ac77e700f1b867aa1f8cf022d470897eb1890e6e51184b777d03e664a","ssdeep":"384:9Zdy1LOmzBU9naXuuNyBJ19hv7qVm+8aXx4cJZoIkFmpSM2vPdv9Cx5UsjYPs0Nw:rnmzBU9luNoJBMmspYeR2vVv9XaY7Tm","tlshash":"a7e2f1bd15ecdb9df6f46f11627a522cd430785b8241849ffa86eca0247d99f0422c8a","first_seen":"2026-01-13T13:58:34.427762Z","last_seen":"2026-06-10T03:58:03.890703Z","times_seen":226,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/5e9b0ec455fb6ee3.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/5e9b0ec455fb6ee3.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"42b-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgsBVnauFbFHGy8rjsstNwq3UFW8R9yJTMDcahXDH5bJ4RNKmo%2FpbsoJuD%2B9ZJuiMiK2Bd3A4MqELCvInbC1KudQshJbP6JtL%2FE0\"}]}\r\ncf-ray: 9d7952ad6997516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1067), with no line terminators","md5":"4c879ff8280498538cf3276f8ab0de27","sha1":"9aa1af1760c677a2cb81a92384441238f1b3ec61","sha256":"103353ff138b3df27b2dbb80c215ce66da6ba569938408bd9556ef7801fb0c86","sha512":"89c2d5ced9c43bb93155ddf6f8eac732b0c70466f66434274eb219d18a57f2bf53d42031965eada09c49328d9bd169078f4a870636f86f18ba8401cf81531a98","ssdeep":"","tlshash":"5a11fc5b081b4c1a542140f418da7b87beb85c9f81d9801eed8d9797207ace87447620","first_seen":"2026-01-13T13:58:34.390631Z","last_seen":"2026-03-15T20:04:55.021028Z","times_seen":211,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_6.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_6.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"066aaa75ffec28dae22b8cd3f7b0efcc\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FD06E248\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRbg0b4ctP%2FvP4PrRxxKhQMi27KgAm5vHMs%2B%2B94Y8Xju%2BPhoJw6nzP7dpDOXaMD19xIKJQXbmznRNWCq3mTYddMXrBFXxAC9%2Bwjb\"}]}\r\ncf-ray: 9d7952b9cbed516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"066aaa75ffec28dae22b8cd3f7b0efcc","sha1":"4a2be5406152424f4734270ccb124b1b069d16a1","sha256":"20bcdc6ae32d4dc20cfbaa5439796970d9dc663c5a295e95219fd0df4ebdbbf9","sha512":"cb94a3625b0a38ea691760163f961b675561bdaa23c66080bfc0e08fd8839dce04812d1cd60ba49e2264eff0306e88e9c7e3653d992872fc4f82a757e5c7b702","ssdeep":"","tlshash":"a34133f7e2d4d6d0e941a7b0c9218199366f28ff3f69978502a0efd8f2210e8c94cc84","first_seen":"2026-02-18T18:42:32.554831Z","last_seen":"2026-05-28T13:56:00.688573Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fufc.webp\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fufc.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9979\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: PPw3C7ULXn4wQwHn3RTK0EgawJWeKzUbvkDhZhEgl2M\r\ncontent-disposition: attachment; filename=\"ufc.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZKeLGkLTg%2Bpx8XKyddePQRBUq%2BB0QoWtvLtrful4gGuMCprEgJyt%2BAT7hV%2BIAqXlKnqaK29RBXxohMfwXleCphBK0nOY4sdvBZp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfad01516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9979,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1ee4d9b91df29426ecfb9eee7a84f7c6","sha1":"deb3aae8f3b43053081618bb12a01f61a1911467","sha256":"3cfc370bb50b5e7e304301e7dd14cad0481ac0959e2b351bbe40e16611209763","sha512":"a8a82dd9eaefcd15b177ba36d99f4cdd837605b512cd32eb307e27cacd5116f26b3d55196a7cded085a5741d487749377b6303b6277a0941b217f39ba915197e","ssdeep":"192:rGXFVjJLCnWHm+unCp0Sqh7SlmHgeKYVnYLAAkAktTykeULu80o:rUVt+nWLcCvqh7SoWYVYLpYtGlULr","tlshash":"8022bfe4a0103c9bfdd401343bdbd7d1a4634ded41abea6d1711a3268671ea58c7b44c","first_seen":"2026-01-13T13:58:34.477608Z","last_seen":"2026-05-28T13:56:00.734248Z","times_seen":209,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/97a6f3ed35a1c469.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/97a6f3ed35a1c469.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"7f3-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8ZA0AZnseV0enIUh8GRjvD9rUF%2Be6r9KMRkm4vS4DnfdY06cn2A6IvQidnA%2BpxCYWoRp6V%2B0lZNQMeKOy3NX0m3XwjpRkjpL%2Fd6\"}]}\r\ncf-ray: 9d7952acb989516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2035,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2019), with no line terminators","md5":"b7efcce7ffefb3b55e70c5de14600b04","sha1":"b056f927afc51decab632ca5d3f99f109e7b7031","sha256":"0e1e093766cb3bdb8388d65d9ca904ab9df9157691a3f647ffc8f29633968273","sha512":"094c76eb01962990a5ccf554e1ee38f0ef2925f93777f6e7ff2c4adb73f5dc38fbe6215ca587d406daed1885fe2cb1af099b6f8cfb9df703a7c6c939bf0644e8","ssdeep":"","tlshash":"9e41315a8a44f6a8038f1009fb77d61079b8030cd1e5e05d6dde0790a2fe3ba943e7a9","first_seen":"2026-02-01T14:00:57.577467Z","last_seen":"2026-06-10T03:58:03.946224Z","times_seen":113,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/eae67140e739bf8a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/eae67140e739bf8a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"cf14-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rnpf5MBHdnB1%2FwiDbUwR5kmxtNWscXstshRxHR2rCZDwCfT7lmAlnGC0rCF62xMOj20EjdNu%2FoRe%2BtjCWkub%2FXwGCZKqmJoTWJCS\"}]}\r\ncf-ray: 9d7952b12ab1516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53012,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29175)","md5":"5c08fe9ec37a475f5088ca31b52ac61b","sha1":"28e6c1b12531189f820ab11ff88152cd522e8d35","sha256":"40c67df7ff2d1eccf9240d29814dd51ec8234badc4e9ab82ecc92089ca944ffa","sha512":"44a275de412cbc1af01c9ac7b3e420d94f1639de4065914cfc903e957377be901187682d14b570a5f1e32fef777d044908eb9c502f8bf2ecfbfcedadca10a2e3","ssdeep":"1536:Yuu8r0x9kn7k1uuFYjNT5zCLctDGPP6byEZjwx:YpGdZjfzCiDGwyEGx","tlshash":"7f33e79061556aacf6570195b56fd00cb02ebeacce0bc418b7bc3c792a148c4bad6fd7","first_seen":"2026-03-04T16:26:33.003519Z","last_seen":"2026-03-15T20:04:54.973978Z","times_seen":7,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/715ce226495e5810.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/715ce226495e5810.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"7d18d-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hq0qnLyVYyDG7cTI28E4fkcRBHvl%2FMMV8XBUObn2RM78mk7ynE%2F6gGy9MlMUwCsR7eP973iNredL%2FzUKgNBS8eX%2F4XIktYCz4ia\"}]}\r\ncf-ray: 9d7952b59b45516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"25bf7268b4a85d2cf070f0586c09025d","sha1":"2448629509897c42f8e626931fb784b4815086f1","sha256":"3295a2af1bf83d2cbe21a9d7b76b124e4815446752b089a46bae2db1a65fec95","sha512":"ce01a6dfc05a234d012b05a34ad54fe0ebf536403eb5dfd98694ce4de2046c397d6a9265f4144177b5f45c78be048de14506586efba782b46fa09fbd965e3066","ssdeep":"6144:4bRE8RQvF3WgrFXY+VheimqJHBmthwRksj6QLB/NY2BaUwpTdjeX6c:4A5WOqaBmsRptpJw+","tlshash":"adb43a647184b46066e781e9407f4809f2372d18d81da8a0f3f9c8dd77aba4cb563b7b","first_seen":"2026-03-04T16:26:32.998969Z","last_seen":"2026-03-15T20:04:55.156484Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a2.espncdn.com/combiner/i?img=%2Fphoto%2F2026%2F0303%2Fr1622492_1296x729_16%2D9.jpg","fqdn":"a2.espncdn.com","domain":"espncdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.053Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /combiner/i?img=%2Fphoto%2F2026%2F0303%2Fr1622492_1296x729_16%2D9.jpg HTTP/1.1\r\nHost: a2.espncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T03:34:35.400809Z","times_seen":16750458,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_1.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_1.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"caa2253f657c946026986b0c4faf66eb\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FBF6335A\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17766\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wSyTOg%2B87ofH4WvmtqP2w%2FUWAtwFk2CMZp8ewWhfLLAAjMhaE7BMNaPZZFQAcQMyULpdI82eLyfHj1rL6O67ICKRNbNyvultfsN\"}]}\r\ncf-ray: 9d7952b88bbc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"caa2253f657c946026986b0c4faf66eb","sha1":"7af83996755910b0473f044d470d5156db636d11","sha256":"ac924842ca2ac124a77620bf8bfaeb55c9daf57c86a0b2b83849a366219d314c","sha512":"0d4f6f18016efa2ab92f53175606b6a9aae567c33cae8014eacbe0b7a35cc22e6995c9aa8a75f860e8d02dcd0adb6124a27fe1c915ad267be8f9e84ead314208","ssdeep":"","tlshash":"be31f0e6a3d4fbd0c247d7b5ec17949ab46f24babe6f13c816e0aa5831100dd1509ed8","first_seen":"2026-02-18T18:42:32.560752Z","last_seen":"2026-05-28T13:56:00.839217Z","times_seen":16,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/9b2ea8df5b4476c5.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/9b2ea8df5b4476c5.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"184c9-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0CE%2BUfzoq6rl2APR5LB9KbNBS8X9TxlDF4S65Qo%2FHIz6Vpj2RRw4n1DJyiJDXv%2BfkpmBxVbs%2F5YED0SqYJoNStKIcToXVM00WDx\"}]}\r\ncf-ray: 9d7952a858cb516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"228fbf4a9ff27aae2ce0c71b7cb71ca4","sha1":"73e6c3249b5c04e36d45c303667adc096443d39b","sha256":"34364711736fdb7a1102c064cf33a618c556d83c2361b06b4df1d214ff10c109","sha512":"5dbe7854729f44233d486e5d7eabcd1beb556feeda537c7c74ac394497a6fcf1577fa2cd8f4298462b6a10a3dda081fc07583f70d25f91d9d2b1e1dfb0a36074","ssdeep":"1536:mkcDwFijRV1pOak4axZPh1HEmEMoejTUGwL3vaaCs0uhWhkS22YgKID:/cl1pOVRxZPh1HEmEMoejTUGo3vne","tlshash":"1fa32a94719333670b8fa2c5586512489e7aea64404c581ff6acade38891d8e73fff70","first_seen":"2026-02-12T20:36:03.583419Z","last_seen":"2026-04-09T01:34:11.866046Z","times_seen":41,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/bd84bd126a31c6d7.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/bd84bd126a31c6d7.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"1f4-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7cPC722A%2F7IUOyH3wzghLTjBFLNAnwYPPIZDZWmfFzg206x9FqCp2bj0k46thPtitnfSh%2FVUVWqXR6c8xafpy%2Fxk1n0uTyiF%2BGF\"}]}\r\ncf-ray: 9d7952ae79fd516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (500), with no line terminators","md5":"4f5c682e79c6a7641a935d9dd9410dde","sha1":"a0975509f7466716edf5511e298f74f9f0fec7e9","sha256":"a3a928e75de69d8e8cf72da2d3ad2eab8b47a018c2bd8fad71794067d9d78fd0","sha512":"bac8698096fdd6a04c0577946a5366ecb06d20fb0c5619dc4c012404d0a89ee8807281632f8a7e516b95b6d267028ed85a9893df2102f264db2eee652ddc3b22","ssdeep":"","tlshash":"c6f0d4e74651d0a200d436acb1335e5e38e511598f4dee77e5690f7413f131bf9025b5","first_seen":"2026-01-13T13:58:34.411554Z","last_seen":"2026-04-09T01:34:11.951281Z","times_seen":212,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0724a67b1049c331.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/0724a67b1049c331.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kpJQd%2BCN4CUkhdKMeGTwG45N3F5wxLEzwvbowSIGubNUTusmfVjSrDbz%2FLNM%2Fr0qpavmR%2BSXxfwEUj9%2BH9Bfq2hQbmcSjTnon5q\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncontent-encoding: br\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"c0-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952af1a57516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d8ed1e5a4e1eeb82187df4f73f81b67a","sha1":"3e4c31819d546cbbfcaa68995b6de6bfbe7f882d","sha256":"8f370376066d4038065c26c3324ce7b7ef3fcedb5a296e43c444185dcf797731","sha512":"3a23c32b5efcd69f34ecab6a1801b5aa5b0813dbad556605f4ada6526432bcdbb08b313a206439f7fd52daf012671bfaa844803d1ac04cc930481f06f873320a","ssdeep":"","tlshash":"50c022286885e03a0188a4c8f0620614b84c38a8a64c540e903f88788061b18104008a","first_seen":"2026-01-13T13:58:34.472217Z","last_seen":"2026-06-10T03:58:03.990426Z","times_seen":227,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ca924d08485cf23a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/ca924d08485cf23a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"f7c6-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAr0RXd9rr12kkGXVzcAtfr%2FV6tPQsba48W5XDnEkFZOe%2BkhMuDkumlbJyvBLUHO8t8YaiB3JVf8FjwrySfF8vciOfE0cnUOqizY\"}]}\r\ncf-ray: 9d7952b24ad3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63430,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63424), with no line terminators","md5":"1f8ff2268083adfe6bc91f9ba3a56aa6","sha1":"93bf8cc4599ff6110badf5005c557e3ac4a2ae48","sha256":"8dd3d37bcb15facb6c46925b364ea6c605f7d5f893c950e6351cbaf6ebadfc2f","sha512":"02decfc42aa3a459f37cf0e43486064c9040e4a5612a075ee177eee7281f877373955239c3372e53ad68ca326d4e77ead774ded1edfa6fae2906b2599e291077","ssdeep":"1536:9X7tPfe6Rboi+h5m4XDd6tuyxo4fJV38OQJxcfUFkwn/OAwg4Np3nbVE69hCfXPy:SGJ","tlshash":"f7532cd017ac27ecf09a0ed6b116851db95f10fceb4ac724cba6b84421518d26e99ff3","first_seen":"2026-03-04T16:26:32.974905Z","last_seen":"2026-03-05T13:35:40.33421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fbasketball.webp\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fbasketball.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11120\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: TvlVBQ-KWF51odo1wCKfXrD1SAa37tCx7DvoS4zCpR0\r\ncontent-disposition: attachment; filename=\"basketball.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHS%2BiRZKM5FEEGi%2BHEgd1IUoFB%2FMZf2EilvuLJCh7bnGd9Y90mLZFXk8YBS8WgFiR4mvX%2F08NGe0nIHRRL6JM3iK9daE2XmLk3Og\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfacfd516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11120,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b6a293c5ddff971440197e9727c2ef7a","sha1":"5ddad43153e986270b5f696926327d98ff8c1058","sha256":"4ef955050f8a585e75a1da35c0229f5eb0f54806b7eed0b1ec3be84b8cc2a51d","sha512":"a93bd4edcf92d48faea42ae565d803a4e1903677f4e4303989ac1e2cd8a92815b2ed903670fad66fcda92faba64c9a05666285e5daac05ac8083cd90f44217c4","ssdeep":"192:rG7ewrDQULm8amyjB5VHQP0CmOoAuJznItmOxel0o:ru/cB5VHQMC0AuxGxez","tlshash":"d832c01957dc8523c2d00774e79c048136041b3b637e97d92e9c793aeb2493ad0669bf","first_seen":"2026-01-13T13:58:34.421475Z","last_seen":"2026-05-28T13:56:00.601952Z","times_seen":209,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/new-releases?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /new-releases?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FkRMtEM47LfxnWfotmlGIp8PDD0bswtuNN17MRMBkWPAbdZaTYC4RiCZBSvIoO%2FK2dDFOOchqHroVrouiie2SHWkALxfxcxUKty\"}]}\r\ncf-ray: 9d7952bfed10516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"d6c4c31bc7d8cceed8fa12dc27a0c53c","sha1":"e76f5ac419db9462240d8cfbd14a8e1b1553cefa","sha256":"149b3b2522cc624bdc89fddbf5484bad41965e947b25506406069963ee2a79b3","sha512":"e148bf7c0b781a3fd1c1f8dc467ba92e8204f918a0de3d9b46d834ad67760f7fefcf29a308730810133c1c5d0a50d4c3111448e76e3ae50cadd3568c9381d0f7","ssdeep":"","tlshash":"dee0e2231c0e18b31abf10f0892d9a062986cd3b339865f0c0601c2f3f7232683cf285","first_seen":"2026-02-18T18:42:32.393644Z","last_seen":"2026-03-15T20:04:55.190144Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6b2b0ed99ff8fd1f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/6b2b0ed99ff8fd1f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"da6e-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awT0zPsjWFXQaKgJaWLJYT29Qk18%2FrCWYnAmSMI%2B%2FnYViuqiFX1k83sYWMu5qva5r5KR9glPC2vOkxSVSnRsEKO%2Fc7OaAW0qcDYZ\"}]}\r\ncf-ray: 9d7952a868d3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55918,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49522)","md5":"6f84db8f24d7537ead1e2450a33547e8","sha1":"eb17a26ed238ab1ca5611a1a4a968c19a1e48f83","sha256":"623c16de4a864775ca83b51b12a453705bf0c7e5414f8e332262a361f7aeef1e","sha512":"a02246b91526147c092c2297b01d4db111858137e23e78ff627a597161abd57a17b3e183c1e4407ae44e3cafa3f2776638fd9238809a4b70899640099ff2fa26","ssdeep":"1536:EU86GOtBW2/YeMpEQ54l4jnYPfRy9rgd+:E0GO7WUwLVjz","tlshash":"84433af533657034875781d6903b420ab33a2565a40a482cf3789cfe39b4a8672b7fb7","first_seen":"2026-03-04T16:26:32.940088Z","last_seen":"2026-04-09T01:34:11.893595Z","times_seen":17,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/pub_bets_by_domain?limit=10","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/pub_bets_by_domain?limit=10 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWzlfedjs%2FpmcnsE6%2Bfk4yvN8u8eoaj7TCAVR7n%2FGrM4elnUcK%2FEnTXiw3Er1EWr7e7494%2BFVNtTMlsE4JwfZWQzfLD5IDRAncg2\"}]}\r\ncf-ray: 9d7952b74b83516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b1b4993b2b3850b612b38e478da97bc9","sha1":"d7ba56311eddb61eaac32c782cfef99b6e23ef82","sha256":"b6bb5c2b4b0ad9e5c2801b9d0c805933e9fe647882b333b943b051eb3673c4a1","sha512":"b219e31c2a44caf7d943543cc9a213dae20ccfcb3c56de3d64eae0830f4053f402203dc5c9c79ec72c2127ff7d363489b4caf758a5bd730d8ccee5629c69e3ad","ssdeep":"","tlshash":"7951de0ea68469b7233b93702e6f9a9ea09dc12b9cc7f88d44f7dd228d7c2151439172","first_seen":"2026-03-05T13:04:34.744335Z","last_seen":"2026-03-05T13:04:34.744335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/players_online","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/players_online HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKl7eTXGg1pACmOq1wEaZy8OxyvF9UVepOSXOXKHAgh1uN1EhE7Og8gun%2FiU%2BF4zXrV4fUadjwB7r4LiFn8Jv6Ex8KFnDL%2B904Hf\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b74b84516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9f17110318b4a4ef338e8816a4448e1","sha1":"f9146dc4efe6dbc398708e6232eb5cb54492b842","sha256":"369e6281b42c135f0f1bfceef9cb4567c6990de8cb94bb9f3776e0d1e0d3ebff","sha512":"d82072a0fe7c5e9330d8c3df6d2d1a40832edec715a16b3024605d73862accc18ec3fdc8e2fde1e380b597970722ea4c1f49575b2b5b3c401baac9f6281ead85","ssdeep":"","tlshash":"b66000003000000c0c033000f000303000000cc00000030300c0000003cc33c00f0f03","first_seen":"2026-03-05T13:04:34.746515Z","last_seen":"2026-03-05T13:04:34.746515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/ss/user/support/chats/unread_count","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /ss/user/support/chats/unread_count HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgZ9NI88Ccqu5W4uEdcfK8EJ2ntZwA5yahn1cXj8M2OyhB4QOZ91XAT5xIbCIzyetj5HHExgCzNr8psUMiajO5l0Hz9j4wT2FT1t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b75b89516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/promotions?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /promotions?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkOl20QYl7L%2BtVTj3Os4KMO7FubcgS3mSSUPYjRNXO%2BAPU03VsfsDcszOGIHJxNNi48FcK8wRA%2FkwppIRWWhrrAPges0fKVZ6kvd\"}]}\r\ncf-ray: 9d7952b7db9d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"40f88bc84b961d6fa5a85a573ac91d13","sha1":"c97d96a96f68efd68e606946744f2d6e4a309986","sha256":"6ed066571253498402038915992262b9536b58596c72a139b124739b924f1121","sha512":"f8672b14f8c737bf416f5c74420e287de0e675428933637a3e0ba79554411f3a75c26b965a002573188b66842d99f322fcf23c39982576e1429826631eaf31a5","ssdeep":"","tlshash":"d8e042235d0e15b31abf10f18a2d9a462a9acd3b339855f0c0511d2f3f7632a93cf685","first_seen":"2026-02-18T18:42:32.487182Z","last_seen":"2026-05-28T13:56:00.65611Z","times_seen":16,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1ec-1f1e7.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1ec-1f1e7.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOf0WWmbHG4wuYw6jrn374Jgm6bXwhUjThfl4LGdXKTkiwuiRWXnQ7I2Gcda2rhqxgkRzCWd0O978%2FfPTr3%2FLYZ2rBoCXsA2KWBK4OA%2FcAOI\"}]}\r\nage: 12906\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-49f\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d63d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-06-27T03:44:47.192141Z","times_seen":10874,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/688e3261a170e82c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/688e3261a170e82c.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"9c7f-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVL1QeQ98ij99eOTXw%2F4rZl36TdaQN22l%2B6hSpE0ZYBVCZenWhR9F%2BHWW%2FZxkr3XehKkLAhOMaxb5wzOM%2FBJpVIwmiU4y8H4cehy\"}]}\r\ncf-ray: 9d7952a858be516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29363)","md5":"a4d785f903b3ed880dda3443db0b0506","sha1":"94bc3d7edf03cba2bbc9d9d1e701d13f71c54efb","sha256":"aa5fa196a32fbbcfcdda28edba4b1bddfa4b6daaa00360f74dae538ac06768b3","sha512":"06c6405b2d9cb690812272aa203d224c706906f81bd9251be95570576274445a2f7196b6aff054b648f74ecda9baca5ab46c08a4ccb53e2d395873e07820c663","ssdeep":"384:O7Cla6CWCmLgG4AYHfcseD1ePEbKDRb1Jn/hHh4vTAfmUb2ZznojLD4qtgQZrIuV:ZlaJzRn/x/2xCLD4qtgQZrIm","tlshash":"e103b5b572d4faa2029344f0d83f100af23d4c7621adb4b0a7e4dcdb799458d92b6f99","first_seen":"2026-01-24T14:43:36.951166Z","last_seen":"2026-04-09T01:34:11.858554Z","times_seen":210,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0763e3794b994210.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/0763e3794b994210.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"11aa9-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDgoZ7cocnxHdVzlj2xsUGusk5UKgaCqP2vfOtxi%2FswB7iKQvjGz80H%2Fhmw2cRWiwEuUkPj%2BtqIZuAT7jL2vzoWF0pLG%2FNbo%2FIsO\"}]}\r\ncf-ray: 9d7952b59b44516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72361,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27188)","md5":"d3c4d4847343f6c24d2b991b2ecb1812","sha1":"e2161337d967fa10956072b1819bab01df94ac66","sha256":"d2c8380b27dd69f8e1381c5fba8dd65b17ca288f8111fd1f29031869d52c334a","sha512":"d6fab146dab6958bd87dac9cb57c9e3871f82e5da7b69aafc28820459f570f5cb42a79d876bc731403637bc22567eab7887063d21c6ffa11ba510906dc8ff62d","ssdeep":"1536:QXJpCuoWxmSznAYA6J2Apyobba01bytBKbaz:OpALknAK8OEtIez","tlshash":"a0632a647980f8a4639781dd803f4808f1262d1dd82e7b74f3b5d8ae27e6609b53377a","first_seen":"2026-03-04T16:26:32.982713Z","last_seen":"2026-03-15T20:04:55.038845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/vs15zeushadseq.webp","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/vs15zeushadseq.webp HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31862\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"74b5d9f395390d1d56b66aa8e2b53867\"\r\nlast-modified: Mon, 02 Feb 2026 23:25:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A823428663\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1md%2F0qroaOU49lk8JOk9ubRUEEWOrw9%2FBDuyGXqeK9POLCAjOzplmYa8I6FU9wT5fWDCBnDu1MzC88rpg%2BY7WzHEaNaLfwZ4yRFn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcac63516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74b5d9f395390d1d56b66aa8e2b53867","sha1":"87030ae2fdf039cd3908c02cdb3957d5a88c711e","sha256":"6b4aeb39faeadf51dbc974099853d86322a1affd8ef7cba0bf88ea8572e2a1cc","sha512":"03e03f641e088fba884408a4abb073ec5f9bde9aac8e2f47c455027a1419f0c981259d497a58b8f06aca8fbbd7c02d3a9dde35959216c135bd697aa4b8947055","ssdeep":"768:zbSsa2VoLXpGcQxxS5uRQwTcxruc8KXp66RbXMuu+FNq:z+QutQzS5bS6/Xfb8+FU","tlshash":"c1e2e1482277e5bafde8a330c918c90a8453b8c53acbd8b5bf942c916536785dcf5483","first_seen":"2026-02-16T16:09:44.986574Z","last_seen":"2026-03-15T20:04:55.065088Z","times_seen":20,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:53.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:53 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:52 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVEFmbBYSRWciE4ZndplmJ4p6ElDvWfa8aGfS1XG0OYuYMsFsCO7bUpYlrejIlZBeXOc39eIEOOU7AwRPDA7MH4OWnG0TCcuRLJd\"}]}\r\ncf-ray: 9d7952c93ea3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9414,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e6fe0f138e602f1069c9ce1804f01a4","sha1":"d8df08bf0eafea044eaaf1d79e67f2a807ef8e09","sha256":"9d61c46b56443d8b9117c4764460c9c47f3e6f2a4fa96420abd9bb7bc656ec37","sha512":"dd84dce8bdfc0bf5fb767869b8ec64b86bca663b003a7be05ea2e6fbf8a3f174c9014385a5015341fac31cbfa795fde72da41914849063ea4dd1e8d6d93629a7","ssdeep":"96:c7p/99CcJFriiI1VhymLXX9efopbysSyRZzYzBNC16VKrRbiRUypwiXMCo89MEsv:WfkXoC57","tlshash":"381204ae49122d8f47565ae07762236a64a00005af872e4ef8fddbcfa1f73ea4730145","first_seen":"2026-03-05T13:04:34.752807Z","last_seen":"2026-03-05T13:04:34.752807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/geo","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/geo HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKkJZ4RVGMWDd%2B0Jzf5NCXiAFPrBVmNSFk%2FKO%2BNz3xGYNdnko778chwzlMrmc74mftD%2BA%2B2yLRCg9C1WpX674vHE8Pnh2WvRl5%2Bd\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b29adc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"542122b04fda568516d89e55d6c36120","sha1":"6e28c2bcce9430899f90cd4cb8c54459918e2c0f","sha256":"d77a18a735b5cef136d19ac34ff02534a18bc96127e2d665d886ddbf47cdb323","sha512":"f2532b01e1668c855c3b0430338061bcf8adf13b67968335bf1abefe17f3ce3ffe3fecd97452de655a18aa1de27103f84f84db53b332b7e05d0fe5f5f895d3d1","ssdeep":"","tlshash":"6b60000000000c0c00c000c003c0030300033c33f333300cc0f0000030ff0000000000","first_seen":"2025-04-23T11:56:57.670009Z","last_seen":"2026-06-23T20:43:15.279917Z","times_seen":244,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1f7-1f1fa.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1f7-1f1fa.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eL3kC6RtwXVwpbUWsQRgQRerlgycXLnNcii9oPrGfl6q4qWuLOOKUxZeMwi4ySN%2FB04eUjmyz9K0%2BePh%2FcIdYkmTwMKkYaUcuHLbBd%2FIFPuL\"}]}\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-10f\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d69d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01efcb4dcb5b464a6859688f7e48907f","sha1":"904f92c480a32d33d7af3f6dd0189573c9f4d2db","sha256":"c120796701b12f5a9869de1fa4f4bfe41cb9127582e27e9fb6e951637a475168","sha512":"1c456d369b62aeb0cc5c757596a328b6b8195255717036344917dce97592081670a5c6faaa5254909b1deda0e3c6cd038721c486730e0beb370a86090781f76b","ssdeep":"","tlshash":"74d0c29881b6e4c14d21c7e03dbc33c1759a22692184109af0421724a98e2ee7a85a24","first_seen":"2023-07-13T04:44:47Z","last_seen":"2026-06-26T22:28:12.862941Z","times_seen":625,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:59.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:59 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:58 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShlfBJXTKnAXU2fP2h%2B6WG3Eq8qsgBby1n%2FNHz4z%2B4Q2NkYezn%2FivvC3rrW5uB%2BIYYMjwjilC03YuV6bA3IEWiAGHY7ixxOizbEH\"}]}\r\ncf-ray: 9d7952eebac3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9409,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e749ed22295b4704e1b6dd9c0e7604c8","sha1":"bb4f2de798b3731e68d5ab6fbdda601ade06e741","sha256":"db3104a409fc6b02833bbb7f1a746ad30503026eecc8f1bf7e1971143ec1bc38","sha512":"cf80af6ed29919f02044b8a596667615a6b243021dd8550d2c28f0685853302aeac19b511f1e40045ff33b5cb23e2c4877652341cb038f84b7abf758a261d748","ssdeep":"96:c7p/99CcJFriiI1VhymLXX5nuCnoQysSyRZzm/NC16VKrRbiRUypwiXMCo8JMNsD:WfkdliC5Gd","tlshash":"6d1205aa49122d8f47565ae07762236b64a00005af872e4ef8fddbcfa1f73ea4730145","first_seen":"2026-03-05T13:04:34.75544Z","last_seen":"2026-03-05T13:04:34.75544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/ss/user/support/chats/unread_count","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:00.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /ss/user/support/chats/unread_count HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gI1OXjZUZoDp22JEY1uoReXAR3GA7AnBOY1PgP6XQZ35sw5pKDhV8B2UNEMrHt3ddC1%2BoouFqFDlf3x%2BVyQFq4%2Bui0ztK%2FXL9754\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952f4fbe4516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1f5-1f1f1.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1f5-1f1f1.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fkbuBS2n6mB6BJZkbq%2F2sjXfD96Wisnmj%2BGxXES%2B5KEXOqSkPxTj3D7LgHBeHS6g824u0u82kdmxUaP1mU4OC4By3aCwGSHc3pfLlYA%2FURq\"}]}\r\nage: 6507\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-e4\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d6fd9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db99e1f10b9b733e13f049300bfaa93b","sha1":"fca0605b7d018ea7d29efecbb7331f23759df641","sha256":"9f82a0527b8126056d5717789e98aaa33e07c9defae573be6d29e26a7d0ea168","sha512":"21995cf4dd87625643bc117c085b64592e247428baaf256e27366205406761d0683768ca591509eaad5d4198b2d0cfa26a82453425ebbfa3b15581b0ea6d195f","ssdeep":"","tlshash":"c4d0a7ec51abe8c44c05c6603d6937c0358a1256218404dbf183272895ca2dd7740b50","first_seen":"2023-06-25T20:59:16Z","last_seen":"2026-06-26T22:28:13.111599Z","times_seen":783,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":55,"dns":1,"connect":10,"send":0,"wait":16,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/fonts/proxima-nova-bold.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /fonts/proxima-nova-bold.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/_next/static/chunks/3f37cfb4370f2161.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40673\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"9ee1-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPlWgmX9azwQbRNDRaVdiix4%2BSghGaibNBykClaCElbyNofXxTfLJLYtZz%2BTFncMdfa%2BcnTsdODXTKIJjnZLgZs4Xmdn0rUjLDJw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952aa4916516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40673,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40673, version 2.983","md5":"48d3c107c13fa987d3eb7906b45cccca","sha1":"68b87a7a1ba49a25d26fe8f5237ece603328ea0a","sha256":"acac712a6b1f8ab9774a10619ffd2904cb439cac895b8e5decbac3ae98961e60","sha512":"18aa93e7832f585c5a29cb9d3daccca06c04b11209701a8628f7743cecb4276aa2ed2a994f402e578dea8a055677cb03457e7f54bcd66ff8d980d366f4edf31d","ssdeep":"768:AWKpi51ZjpMb3g+p7iAEkbkrFDKG2xDkpI/AHVYnk/phcAI2n/+ClYL:Ypo7aBiAQrML9KwA3pu3YBKL","tlshash":"f303f1c98fa1a299cb822a6edc5b575d735902c5c9a0f3f0831b0194b5b5073fca1dba","first_seen":"2026-01-13T13:58:34.521269Z","last_seen":"2026-04-14T09:41:52.519738Z","times_seen":215,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3f2df0a9f0c8c9b6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3f2df0a9f0c8c9b6.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"9c50-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESHVw18Zv7q%2F0d3Bk61rE6qkBLvqOaCV9bBwDSdgj%2FWpML7t%2FQvsP%2Fz98TUeEVpBjiIFsO%2FKUMMvk0VvOFXSk4jngMFNCdRmJBYu\"}]}\r\ncf-ray: 9d7952ad699a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40016,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (39935), with no line terminators","md5":"c7cf8464e534d3fe0cfdad902d310489","sha1":"b947e51380452c9370cbaaee8cd1915d6573423e","sha256":"8177effe603ef1689fce7859cf54d6fc4afaeef8430affe1c7c280818dcf641c","sha512":"81707a3c7ab33a871430e6daf613da508a3e628d6a4a8774a1b491ca74c7498678c97026ad579f347f31fd816e74060626b3599ca02a2dc6beac91ad3ca2ec8b","ssdeep":"768:s6lPc9kgRKuW2haDtDR6P+WE8uW29mIQ755:Plk+gRKuW2+lWiW20I655","tlshash":"9a03e92fe75a237707c302d63acb4adaf37aa05837b69594c858c24c1396f6c8337665","first_seen":"2026-02-12T20:36:03.452939Z","last_seen":"2026-04-09T01:34:11.900083Z","times_seen":41,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/bd8134abc73ad514.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/bd8134abc73ad514.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"17b-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twMlI2fiM5sI7G6vqvsnKCer%2BRdsmXH7ur9nAkFYAQOZKfd4OltvLtqnVxhkvn5qcFNzxU2B67O%2BOc%2BwlEBhIbdmp1kVKwsPTxg1\"}]}\r\ncf-ray: 9d7952ae69da516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (379), with no line terminators","md5":"165fd581909f5aa34a58fd0f0e2227ba","sha1":"47c3422224dc5d6e6a4c0ca212371377b5906bc1","sha256":"081a4e70046edc5780986ed69069643bef45245d59715cfea62414327886561e","sha512":"d8ca8ad25cc830ba7d27f152846910b66934cf86735f6e0dc9542310a63b4fe3707767921c9600071a75f576e427cdb839ae2be85d22766e221c652984ad970d","ssdeep":"","tlshash":"00e0686d0a456ca82a01e69cb52f57a471b7209e40ee6800da8d8efc6532f3e0b46016","first_seen":"2026-01-13T13:58:34.516843Z","last_seen":"2026-04-09T01:34:11.881115Z","times_seen":212,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ede46ed25a51b417.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/ede46ed25a51b417.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"90e-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VJbZQcDtDhScCGWNH6E1biU8b91oaH%2Fa4l8hoLNSHmoFa1pDGy%2FRCv7xc0WH217dL5ET7X06vTq0dvNZofPdtEh6yz1vFnB%2FJaZ\"}]}\r\ncf-ray: 9d7952aeaa18516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2310), with no line terminators","md5":"5e5bb589cc16ca039001c07057fb28a4","sha1":"b5665dbca43c796f3868939e426cac74de709bb7","sha256":"27c2297ad708af95d246e037e0c5c910a07c70e3b59b9ebf2ac7255b99e158df","sha512":"01d2f9c51d846d37efe2b5582ffaeffb7517cae07fdf62b5c846170c9bd299c419b35621941f4a5389c031aed1770fc1eb24ff26f0d35243824655bafa8136b6","ssdeep":"","tlshash":"7941451e0e04fd9406562168adaade6c70a4421d90e2ec4caddd07e863ee35d453f73c","first_seen":"2026-02-13T20:54:22.138532Z","last_seen":"2026-04-09T01:34:11.936296Z","times_seen":35,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_5.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_5.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"471023dde6f451897895bdfb2a393df6\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FCAE1F83\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOcKX%2BBNKGqDwL22U1eHhdaWFsBokdM5TtW4qkDJiKMJY%2BOp65FklhbM5j9lM7qGsFW5sEq4BVyt8WzlO19GT50jObK1BdNRz%2Bzh\"}]}\r\ncf-ray: 9d7952b89bc2516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"471023dde6f451897895bdfb2a393df6","sha1":"0b2d00cf5b833d8b4330cea60425de69b2be845e","sha256":"514d1a98ddda8d76784cad08d9d3b570f84eb4326f91783e6f95926d40bc35c8","sha512":"d2af4ab28db064758caa82ceb989f1271210e46c13b12cf44fadc09cacbe4e176d715ff70be7b5ad81d6368c8e3fb78cd368ad2305dad6cf32808e9a6dbb103f","ssdeep":"","tlshash":"02112de683d273e2e147cbb0f1e25991386f28f4324cfe0887621a85f02505d8b80080","first_seen":"2026-03-04T16:26:32.989882Z","last_seen":"2026-05-28T13:56:00.753811Z","times_seen":11,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/crash_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/crash_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 567418\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"ddd3300fd0cdc032c7fe210233500e41\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A8227CB55C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lgrVmU0nMQkd%2FJk3OUNqAriW4BFjkEYvbkS91suOdZBKnL%2F2qcKH3X7a1OhCzyAB4hXP4NNbd79MYxKQKlvYQNISmcgBtp97eIA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcac67516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":567418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"ddd3300fd0cdc032c7fe210233500e41","sha1":"0a86c95eed9f9a129677173ef48c0299de7f6d22","sha256":"d8d58def8a36beabdfb52be4aee026224ad1a028c3df6ccc58b34f77f4828504","sha512":"644bae34f26adbd90dd5aa577505702c35c5e2ee2252546570070e0a2662995d715d1d70f28c960cc538edc190a6ba505aadbe88f42277d90ab4506c29e164e0","ssdeep":"12288:kLQFxrTfV8U4/Aj4UT9Em88/n2LjiiycNThDOJjXLKGtOHmthlhYg+Uenl:EQnrLbj4o9w80iXgOtR4YQl","tlshash":"30c42320b53ebb12ce0c1a091d6861d1b365a161c7501c4d5b2fb2a9fc2b9316badbfc","first_seen":"2026-01-30T07:25:16.025088Z","last_seen":"2026-03-15T20:04:55.052673Z","times_seen":170,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/d822024b7c0240e5.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/d822024b7c0240e5.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"4719-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MNUTnmvtHti0DX24%2Fw7Hot38SXPnXSueoTMtKOar9f73R0ARhpW%2BJJhOvYRhoX7PTAUwwJ7LDfmTmbFsRYszl9DdmWK7HR%2BB%2FHA\"}]}\r\ncf-ray: 9d7952a858bd516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18201,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18201), with no line terminators","md5":"c46e0704609f52028dd7da3d2269b489","sha1":"0203bea38e30cf26f03e1b6c5b77d36d56e68d88","sha256":"783cbd97cd13b1fe44d90998b50d7ed5ec942c759b9eaf7cc76b9e6c67502cdd","sha512":"9a2d88552c55a65393b8929cb929c9d7a49c5a4ec029ffe7af50a98830a3a4ca3c0b5fd47f8dcc1fb0e1bbb9070160e6ab3cf92262e723e38518d3adbb1b4c69","ssdeep":"192:sMQl9Q8496PSNbyjEhg4sktLAwiKw1u5sTcAi5LeL1hU5ZMeuuNjOOpryQjgEzmP:sO7caBMIskw3+0cjeLuZJB48/A","tlshash":"1782d6aeb194f4921fa364a5803f500bf2392976285dd0a0a3a2dcf5b9f415ed133f5e","first_seen":"2026-01-24T14:43:36.827236Z","last_seen":"2026-04-09T01:34:11.947597Z","times_seen":210,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a2.espncdn.com/combiner/i?img=%2Fphoto%2F2026%2F0303%2Fr1622492_1296x729_16%2D9.jpg","fqdn":"a2.espncdn.com","domain":"espncdn.com","tld":"com"},"ip":{"addr":"95.101.11.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.espncdn.com","organization":"The Walt Disney Company"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV E36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 14 Sep 2025 00:00:00 GMT","end":"Mon, 14 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FD:EB:F9:10:BD:EF:E2:53:65:5E:6F:B8:B5:5D:56:D9:9D:41:CA:72","sha256":"D0:E4:DB:32:B0:19:F0:21:EB:96:47:BF:DF:56:E4:92:19:25:77:48:4E:56:96:C6:A7:78:13:CB:43:AC:3A:F3"}}},"request":{"raw":"GET /combiner/i?img=%2Fphoto%2F2026%2F0303%2Fr1622492_1296x729_16%2D9.jpg HTTP/1.1\r\nHost: a2.espncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Mar 2026 13:00:21 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-length: 112243\r\ncache-control: max-age=86190\r\nexpires: Fri, 06 Mar 2026 13:00:21 GMT\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1296x729, components 3","md5":"2e749c9878695841d601f5c358aa0ae8","sha1":"3c9326241ccb6baaa1ab0ea42bf0ed4210ca5578","sha256":"4b016f40831a9213850246dad2c73e2d83eafb6f116428311ff2d6583d8ab869","sha512":"0b7c118a938c95cf7434cf5d3fcd979dd59cc2e3dc2fdbdd7ee89ac45c67b1ef8b667daefed74a293b205e55d3d0609605117fdebaa32b900e65eb88fe7a7bec","ssdeep":"1536:XVOif5bl5WesVifG8tS+m/zZWyQUm04k5KyQizlWivdrJUMe33hYr+tSVH+lgznb:lOWv2Ye8S+zyQUm0LA8zyaVVewYDk8zo","tlshash":"98b312a775f763a9452cd515277424482938a09ed6deeccf882ee81733a01f13dca5f1","first_seen":"2026-03-05T13:04:34.76432Z","last_seen":"2026-03-05T13:35:40.204657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":41,"dns":7,"connect":1,"send":0,"wait":60,"receive":11,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_7.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_7.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"e8cc88d7291802bedb7d437bb6e8dfef\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FD0EF50C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnEljsUP00xAgT4w1f2fFcPVjdeyTV5AN7PsBC96uYs14HQRFWb0ClVqz2bBQ6H9EsmGVou5LKqUaJhM549uaU47LPbzfj4QNP%2F2\"}]}\r\ncf-ray: 9d7952b9cbee516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8cc88d7291802bedb7d437bb6e8dfef","sha1":"52d59becc78dcbc2fd5b70a45c8ea41e9ad517a1","sha256":"f203da31a6e87393a784e40a6ad4ebd423a121a1f9309cf43bc1281949f6761b","sha512":"ada6c4c3391efb9e9e1202460a334ed34938ce2bf9ce7073bb9baba476a4831cbdc95f0508f1c8e22ae0a429aabc3be0233c842b70c085c1efbd18c66c4cb988","ssdeep":"","tlshash":"46318bf2456c60e6ee8c5fa57225dc77120f3c7a3fa8c08cd9209984b75255ee81ef04","first_seen":"2026-02-18T18:42:32.428696Z","last_seen":"2026-05-28T13:56:00.773205Z","times_seen":16,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/mines_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/mines_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 539917\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"34e7d126f4f8116818cf1b52e7f1d7ef\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A821AE93DA\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YK5dU3gZAItk%2Fa32g7wdlTKeODyMENGgPFZWk3tZR2YXxfuufDcKuHsbHakWnr0xRotd%2Bvd4N21eb35wJxUT0qRKRo5dlNQ4fX9O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bc9c60516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":539917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"34e7d126f4f8116818cf1b52e7f1d7ef","sha1":"9d1d4360ba255ec8b4874e281aac3e99fd66dd8e","sha256":"99d89e3a4cc0dbd098440f31b451d8174f874713d0e3561492e688632795019e","sha512":"60e6e5da6a30bfb2672f558c910c4c21de2de0f0874f7bcbb45ceab7cf45dd8379395b4c70412f97f3354faedbcabf14f8e59559ab10306485b03a36704d1680","ssdeep":"12288:gQt7KAy9mtVB+IzoI8o2AbkJOUmAA0w17dkBYHw0jdhK4alpNWbb1:ghAyo+IQobkkAAf5dkKQ6h9aUh","tlshash":"3cb423586923ceb850ac3878f80bd9fe5f63c479e549239cec800a65f2d5345b5af6c4","first_seen":"2026-01-30T07:25:15.971019Z","last_seen":"2026-04-28T18:07:01.632919Z","times_seen":172,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1e6-1f1f8.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1e6-1f1f8.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHXADbR%2FA7PJcgG5J%2B93CwBwb5TnLqf9xNg4s%2BqxoPscrdwXBnH6R7IawshfjzgAiBSisWnflEYkG%2F6Gi9X%2BtF00ouwEs3bFqVQpi72V72E%2F\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68e4161d-15e8\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d5fd9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bbe762f2ed3ca3d9daab13cb96efada","sha1":"9717b6cb2caeee5973d6612ae3af92004c7cd404","sha256":"1f0a9e78520f2b6fa9a8a561cac7f419a5d3cfa8497070c4c8a92ac2dc3b4a5b","sha512":"48e865c4b0842c83807caac26914c1cf5fc26672352057c15c278132e69be72111373b7787363152d4f0c2c3ac561b41937120ed9984e60a94c402bd82029b20","ssdeep":"96:NJpQ0OQLMyo5SiKct+UdJ7M7YBI89ZoHDBXn3hVcduY43/:NJiVGnHUdOGiVXRVcoY4v","tlshash":"c1c1f1856270b7549e98e69f0f6afed0910fe0ee94f789c575ef821c940fd88b748850","first_seen":"2024-12-06T00:58:27.509561Z","last_seen":"2026-06-26T22:28:13.057379Z","times_seen":49,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":52,"dns":6,"connect":8,"send":0,"wait":380,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/slots?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /slots?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhGV4qZCYb14HtQfoRQ5Qq0udXUSfVjfY6DgqbGvfedcLtZ8Kepu%2FMMeiTuHABwWDcWMtTnjKi4xVE%2Bq%2BEvvCW7FpFvKGY7rggM4\"}]}\r\ncf-ray: 9d7952bfed0d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"debae8f6f6c7b13fadbe05f7598672a5","sha1":"3f41bdd6f00f991546900c0cc5d013a9b3c478c7","sha256":"3166a596d99623100cf1eabc9c91a3e89b11802225ca3d374e41e7e7b0a439ed","sha512":"0fdfecdca882e0add82c203914e84e36960019e2dd8eac28d8bfe1ff0cb82da7e3592f7d89ef4ec0df848c257146b93ec963061e9147bba5d4a55a34a307ecf9","ssdeep":"","tlshash":"4fe042231d0e19b31abf10f0862d9a062986ce3b339855f0c0511d2f3f7632a93cf685","first_seen":"2026-02-18T18:42:32.588903Z","last_seen":"2026-03-15T20:04:54.983406Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"bd30-19cb66cc6a0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q04LB46pKd1IVV6ZQewiGJ18PI76N0hv%2BDjLzZw3kM8IGSy0m0LQF%2F009yf9FUhiuB9OAhrcrqyM9uvjsUjBI2g3k6%2BV0e7tGAeo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a848b0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-06-27T03:36:24.508226Z","times_seen":70201,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4694ccbf99661862.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/4694ccbf99661862.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"64a-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qokmDoWqhYia6kW9HfiRy5rPNcSqQwxuk3C4Hmgg63%2BOlqRNk%2B3J4%2B%2BG%2BJQMO1lsYS3n0TmDIoqLW7eyWR3%2BYEDa%2BXPrZ0U%2BT5F\"}]}\r\ncf-ray: 9d7952ac797d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1608), with no line terminators","md5":"08ec2b2d9a695fb9ba9373c1282b593b","sha1":"7cca762ca195d4c173c33ce95e9ff64237ebe964","sha256":"ef81277a962f81ed20594a1778caa84d15449f34a395f4fd9cf39c48dd7c535f","sha512":"fe1df58d8ba5e748b6f61f4d2e831e01cbce5755981f18bb2d383dd74381bc5e84977266f78faeed46fe599cc9e8714ba8572d61ca3620e113a5cd9fb5048f9f","ssdeep":"","tlshash":"d9317316e5000bec031141a2a07a2af8b06d1118f3bb4d96994ec56a62bcf79f13f3b8","first_seen":"2026-01-13T13:58:34.496506Z","last_seen":"2026-06-10T03:58:03.988804Z","times_seen":227,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/715ce226495e5810.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/715ce226495e5810.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"7d18d-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9prS3GJKUrfPrPNiqQR4pj1wmiTjIV%2FQJfWypADGvQpdCDs6YnrfKOCaeBUPRumtHRt89TJikacLkbugsJ70kTtmEPCTYHeKMKB\"}]}\r\ncf-ray: 9d7952b13ab9516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"25bf7268b4a85d2cf070f0586c09025d","sha1":"2448629509897c42f8e626931fb784b4815086f1","sha256":"3295a2af1bf83d2cbe21a9d7b76b124e4815446752b089a46bae2db1a65fec95","sha512":"ce01a6dfc05a234d012b05a34ad54fe0ebf536403eb5dfd98694ce4de2046c397d6a9265f4144177b5f45c78be048de14506586efba782b46fa09fbd965e3066","ssdeep":"6144:4bRE8RQvF3WgrFXY+VheimqJHBmthwRksj6QLB/NY2BaUwpTdjeX6c:4A5WOqaBmsRptpJw+","tlshash":"adb43a647184b46066e781e9407f4809f2372d18d81da8a0f3f9c8dd77aba4cb563b7b","first_seen":"2026-03-04T16:26:32.998969Z","last_seen":"2026-03-15T20:04:55.156484Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/674c46380ebb8de6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/674c46380ebb8de6.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"529a7-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJkkBYPN8l5Nh8pc%2BCbSGRP%2Bxv7KPBoYj2iJ5lweEBYIKC2ZdKcINAoVeW298NX76U%2B4pFAeNdFPx9bOHQcmbUouKrsBoctZBh04\"}]}\r\ncf-ray: 9d7952b24ad0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338343,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7d213c5caa7f7c5ec4b70179cf00316","sha1":"001f35a9db42d0cddf266b2d59c95b9ce311f235","sha256":"8ef13b905a69d146ae51e0fd29a856f06416971a0b6571d1205cb50708aaedd6","sha512":"9ecb26a29dd8dff7110ae8f2baadcfb0ef1f028b0170e02c34178b0993d823402c6db4e872681906862615641ddab61a046a80e8ce01a8320e6425cf33aa31a5","ssdeep":"6144:LIgbOu7Li5xCA0Ro0OKn7Ntb9YtJXQp2JM/RQO3lH4i+7OsT:LIViLiiA0CK7n9WJhi5QO3cXT","tlshash":"bf74f1f283d4f5c96d530f24a8991a241c1879b7eea842d6fdaa814ee1717ccedc8c61","first_seen":"2026-02-18T18:42:32.568258Z","last_seen":"2026-03-15T20:04:55.075192Z","times_seen":12,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_4.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_4.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"8d19f2a24b11f4751f946abd4099b363\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FC89751E\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAiX2UCyiV8OdU%2FCk3VK7KKzeiddtCdJbjVI2DufdwoCOxgPtwrAhWL6Pm118X%2BH13mXS5xIty0Z7%2BAM6cxVTLVnEmutQAJWFSL6\"}]}\r\ncf-ray: 9d7952b89bc0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":950,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d19f2a24b11f4751f946abd4099b363","sha1":"dd9d0129e9688ca52a687ef8cbc12dda64b944b1","sha256":"140541015159ab84ecb511468695d08ab64d81fa7f8b5f39daa1cfd5b88e09e0","sha512":"c5d12ea38a032c0e3b4ac17577e62a334d22ef852257977113627623765c581e7becec590c5fbd067740b9ed6f0535385870dc2f859b6f17d50142e5cd79e2ac","ssdeep":"","tlshash":"6d11bdf7a344e240e519dbf69a3a2fd136af24762f7ac3a051e27a94f62517d0d0cc04","first_seen":"2026-02-18T18:42:32.448102Z","last_seen":"2026-05-28T13:56:00.665854Z","times_seen":16,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/recommended?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /recommended?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IEjoI%2FYPpY4EpZIotI5WG2icQcnYBTq2rtKE2vvluYvia%2F1CnMaZizYEgKp9eQq37RZaascc%2Fhmp6mIH5PPEZMXf1ey23y1uHPGX\"}]}\r\ncf-ray: 9d7952c18d62516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"71c4cb5b5211d36496691a202ee6ecc0","sha1":"a68e9cca57b6554b26d72a33543427a71c34e5aa","sha256":"77d0ff0748384bae77cfba865da4b187b89ae3bce38a7c49f9a597050ad92d47","sha512":"0e96ce8fc87cb2a25971f501746e545b5c52598c26e3971f2b1e941addf7f7ffe34d40f65488d52e5e4b769924432098282c1eb85f25af23c77766efc40cd1d2","ssdeep":"","tlshash":"8b510f3f8701edde5797866900ebb24a664c473b47149c66c4dd4d08238a22f1f72ba0","first_seen":"2026-03-05T13:04:34.776746Z","last_seen":"2026-03-05T13:04:34.776746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/674c46380ebb8de6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/674c46380ebb8de6.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"529a7-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsdYToY4VasK1tGkVL2esL3B3Z09lMgFVHL%2FVoEw7CGk57LLUCfIhBRSviw9WOXz28RyBJ91VlcRY5Tgwk59J4ltz6o8Mu3TKIfR\"}]}\r\ncf-ray: 9d7952b12ab0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338343,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7d213c5caa7f7c5ec4b70179cf00316","sha1":"001f35a9db42d0cddf266b2d59c95b9ce311f235","sha256":"8ef13b905a69d146ae51e0fd29a856f06416971a0b6571d1205cb50708aaedd6","sha512":"9ecb26a29dd8dff7110ae8f2baadcfb0ef1f028b0170e02c34178b0993d823402c6db4e872681906862615641ddab61a046a80e8ce01a8320e6425cf33aa31a5","ssdeep":"6144:LIgbOu7Li5xCA0Ro0OKn7Ntb9YtJXQp2JM/RQO3lH4i+7OsT:LIViLiiA0CK7n9WJhi5QO3cXT","tlshash":"bf74f1f283d4f5c96d530f24a8991a241c1879b7eea842d6fdaa814ee1717ccedc8c61","first_seen":"2026-02-18T18:42:32.568258Z","last_seen":"2026-03-15T20:04:55.075192Z","times_seen":12,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/aea6d8ed908afa0d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/aea6d8ed908afa0d.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"152b-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3PQScoB04sC4BtNJHLy7AR2LEJx%2F2kV3VMDTcyuz2UJIVs9dFCHguD4Rn9WwkOo%2Ft60q9UQNewCE1dfIkeRcaGxEKo9EdFEr10G\"}]}\r\ncf-ray: 9d7952abc959516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (5406), with no line terminators","md5":"3d2e23f6d8c9c4a994917eaafe374872","sha1":"9032c9f3b9c766447a473b8ac1ec8e54e5b32685","sha256":"4446b6c924429a47d7e7901971e98d3930a9d17c1b9588568a4af4436a9a827f","sha512":"260ad26d28f4e64fd12970f9d5b26fa252c6cf90fee43df8d843bb7731b716a1ef5fe58927d000c3da920b365b10fd77025ce1fdde6176d121714bb104501780","ssdeep":"96:tk6BEmzi5fGN1u6HbRJuh4nUPomOoxTcekt1u7SrS8+xipty0sO/83gPAUCHnw9x:tkEEmzi5f6j7j04wOAGtcSrS8+x6tycV","tlshash":"1fb19517b718326a07d34051baef859da37955247371a9aa5ea8c31c13a21bd93333c9","first_seen":"2026-01-13T13:58:34.455977Z","last_seen":"2026-03-15T20:04:55.125738Z","times_seen":211,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/10bece00af0eadda.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/10bece00af0eadda.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"6082-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVUUHoEgSVIpQSIeP3YikfAN5P7GKx2%2FlLuk71bWqyhUe%2BJb4Z%2F18XLLe0qY%2FxP%2BAXU%2F%2B5oMOZWpxtVIX9Fc4d6HIXzLiVg2OE%2FJ\"}]}\r\ncf-ray: 9d7952a848b7516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24706,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (22629)","md5":"611261d60ce3eca43c650fb0321cf219","sha1":"5417ff0a2cbc56a5911906434a44d82668141e8b","sha256":"9e45225f6c5d6e9bfb8f25ee376d633bcae09c127b3fff10d836b1d8dc541ff8","sha512":"f072b4e57a8b8b889680181ed43359b0e1722a33e28f2120e3860004b0ae075ed8c4976e0968fa7256f5b9e48cd2a63c1e15ffa2325de204fba88f6c52ecbfcc","ssdeep":"192:/yMO9w9qUMOGfRHszEKDNDAV5dCk/kl9KZK4WK4hRuK4hwa0K4hwafK4hwPK4hwr:tO6REHsBgkGObb","tlshash":"d9b230009804299ec93b45766adcfd87770e7baed63ec2e1f410b95923be09d06dfa44","first_seen":"2026-03-04T16:26:32.947109Z","last_seen":"2026-06-10T03:58:04.11343Z","times_seen":33,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e871c8e1d1ee20fd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/e871c8e1d1ee20fd.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"8604-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3%2FgBmvFlmtpSu%2BNccjarL1oodi5YuYF1tUtZgmba0kayHN3UYD6BaTzfv5HwfeWbGN%2FhiBX%2BGCaINPnbZp3dMENO2Bg%2F7MNV5jr\"}]}\r\ncf-ray: 9d7952a858c8516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34300), with no line terminators","md5":"c2dffa441f0329b72daf658aff5a951f","sha1":"44ce281e39dc390a699d8e2056940fc50b68574b","sha256":"4b90042c9ca22ebfb887fee2c77600db1eaa7506d1ee395fc2d13b87f8a396b9","sha512":"43b86b7db58da455844acc757c52622f2be11f7d7ff082ae4489f74d2edd18c2f61e9ecdedd0268d8a97754cb428bbae8afe38964eb40b5b53cdcd04f0633f1d","ssdeep":"384:yvQIkjOEx76ctwGZAE9l4P9m1lEkWFHWYSGXwz2NdCCVlC6L8ZkYgaJGr7FCp+Ck:yILXZAEim1lD2dleWbCzhRgi9HssE","tlshash":"ddf2f9a57251b22b7adac182983e4019f2296d18140d402c76edbceb75a3dcdf1bbf35","first_seen":"2026-01-13T13:58:34.387972Z","last_seen":"2026-04-09T01:34:11.940421Z","times_seen":212,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_5.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_5.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"471023dde6f451897895bdfb2a393df6\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FCAE1F83\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afqMTfkhKcRgE%2B85CcvBqOSYrL5RrVqWb9GaR0ILaae7QlO0TZnby1cPFsOU9SjnvoDhNFa%2FdBqbY3PzenuqdlUetvdMzQUQhu1k\"}]}\r\ncf-ray: 9d7952b9cbec516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"471023dde6f451897895bdfb2a393df6","sha1":"0b2d00cf5b833d8b4330cea60425de69b2be845e","sha256":"514d1a98ddda8d76784cad08d9d3b570f84eb4326f91783e6f95926d40bc35c8","sha512":"d2af4ab28db064758caa82ceb989f1271210e46c13b12cf44fadc09cacbe4e176d715ff70be7b5ad81d6368c8e3fb78cd368ad2305dad6cf32808e9a6dbb103f","ssdeep":"","tlshash":"02112de683d273e2e147cbb0f1e25991386f28f4324cfe0887621a85f02505d8b80080","first_seen":"2026-03-04T16:26:32.989882Z","last_seen":"2026-05-28T13:56:00.753811Z","times_seen":11,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/responsible-gambling?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /responsible-gambling?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onQpC0H5YQogShZs3sRF3AMGPDIIh5ziiMURUhshiB08Zf5YeYMuPUC4jTJGPhAZYk5tBF4lyNLkeEzkFqEqXpjCPYBHv8uqkZJi\"}]}\r\ncf-ray: 9d7952c12d41516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2953,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"2f7f417536d34021d7968faa0302c0d6","sha1":"5b13e7a00f6228b9e948d88b683ecb3e02eb3ccc","sha256":"c31e037654b728150cc7df83e89d9809ee9d6eae789220bda343fb129f415faf","sha512":"f82b1fd9dff37d74df506da87027917d4c1a0115dd015ac7580caf61fda3c44b80d07b4ae81f2483a0f27ca30d81004b9978a0d6a97a96cee1bf17f51bf5c35e","ssdeep":"","tlshash":"e0511e3f8700edde97d6466500ebb24a664c473b4b14ac76c4ad4d0c238a22f1f72ba1","first_seen":"2026-03-05T13:04:34.782156Z","last_seen":"2026-03-05T13:04:34.782156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/media?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /media?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5v64APzohD2Eqw0OQ6TCa0Q02%2BMLHkd4mnTNnqY0V3SQb00vVnYBh4zgnAhYT%2FxjMk6LaFufo9gVdQwUiRyiWwflLVPe03lAdVf\"}]}\r\ncf-ray: 9d7952c13d45516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"5495b3a9794410130a5b4db39f275cc5","sha1":"6f7f77e1c53388cfc5ecb36f3ba4954fe836b86d","sha256":"fce802a966d1989996c6c37bbc244aeb3b96aa05cc4ddc46d9ab056299702e16","sha512":"01e2ad57ddb5a14526f271c8495c71cf56aa92fb23ea9509cd50e4c7df5eeaaedd8b16920f3241c69d284e1de7df6bf392eeca814f5e68da690bd2445bdd5fef","ssdeep":"","tlshash":"11511f3f8700edde97d7466900ebb24a664c473b9750ac6ac4dd4d0c238a22f1f32ba0","first_seen":"2026-03-05T13:04:34.784202Z","last_seen":"2026-03-05T13:04:34.784202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/icon.svg?icon.6a5f09d1.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /icon.svg?icon.6a5f09d1.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 05 Mar 2026 13:03:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O01S44EWOcLVRrMLzyCbct6MCTSYfBrYH25ToPAY3JPN%2FwndFbzqL3a1vLoJT5tCVn9VEPIQe52SduZDkqtqP9lGt3KxVUSi%2Fi0L\"}]}\r\ncf-ray: 9d7952c21d71516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d463307224bbf1e821b1a38b65fa0269","sha1":"98c13ae050591c19768fc5dd32a6fbc9038e3cd1","sha256":"5163f65b0d9b8b660d5fef6aafceb1c6264cbfed84b637da9e78e86a3a9a6910","sha512":"a9116506d381fa3eb52f4446408b1e4fb8ce00dc004bf58b29c96ec41dcb5eb57c31c5bfa3395e7455ab87ae53fcfae97950b98b5d946684cb4a839aafb0b740","ssdeep":"","tlshash":"647188fa53c8b6d0e507ebf0cd3614346a5b28febf55c28549aaade9e53144d8c9cc80","first_seen":"2026-01-13T13:58:34.43113Z","last_seen":"2026-06-10T03:58:04.086991Z","times_seen":228,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/src/assets/fonts/Inter_18pt-Regular.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Regular.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ex%2B4OiRr7z%2F461ciFfhpWeLT1GSXjx26EEH3B0lKcnZxUrU077g59rKkfyx1byD6D2hdFIX5062AokqjZbdyfnLospZphPJJm%2FbO\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, must-revalidate, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a868dc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":38639,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23735)","md5":"ff2162c832adea57eb206cc594de77de","sha1":"3b52f3865b5abda0bd146c6da948d19d204dfa1b","sha256":"edbdb7522514c825bc747afd03f984772ea92cbcd9514a3bf07e0aa2596c2428","sha512":"77d6b45ca6d63ccad6f52d151ed1c1aa9f812760fd5674c4c8ff62f0facc1d87aad859e4629ffed3a1cc6b526f27ee9e3d3f2d18be20d214d8dc28fbe6178080","ssdeep":"768:0EECC1SOkziFlBClH7ThS00QjVWwBJJPw:ulBkHhSv","tlshash":"2903761ba803c916a96eed1812ff2f2d00cca5378961dc39f79dca4d0b8157e47e6e85","first_seen":"2026-03-05T13:04:34.78766Z","last_seen":"2026-03-05T13:35:40.210442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4995390318262d42.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/4995390318262d42.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"842e-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtS9hXGDis7d2qR3mA6RMaw7VJujuKaABJUf09ekdLmK9xFtHrDjM%2FOWU9mfygXhO3jUeHssCjcLJKRBvhMErZcwRXx9BTDJINcr\"}]}\r\ncf-ray: 9d7952b58b41516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33838,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33812), with no line terminators","md5":"3b7e6d3b316671b804c05fe744c95765","sha1":"ec3b1e8ee00d6f9de4bfaad94e92c37c51660627","sha256":"92e69287b0ef61598b2880341eb4a6f73a83db8526723f8528761a2d7f2f7b6f","sha512":"14eeb08ef1ab3e3af27e167f9b3463e531d56f4283de18ffc940e37e7a747ef5d2fad361e8a72539139654d1df0a0e4331cdd842bb8d9a04f8769ddf5061afee","ssdeep":"768:H940K+YkVEWBxWj2VNofASv14MM9cYg5QDy:ddxYyBxvVNMASypCDQW","tlshash":"4ce2956062016ef8b3a704d4b46e854c701ebf9dcd0e8958b1ba7c1a2a84cd17ed7f97","first_seen":"2026-03-04T16:26:32.988955Z","last_seen":"2026-03-15T20:04:54.995413Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3media.247sports.com/Uploads/Assets/767/636/13636767.jpeg?width=1200\u0026height=628\u0026crop=1.91:1\u0026fit=cover","fqdn":"s3media.247sports.com","domain":"247sports.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.068Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Uploads/Assets/767/636/13636767.jpeg?width=1200\u0026height=628\u0026crop=1.91:1\u0026fit=cover HTTP/1.1\r\nHost: s3media.247sports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T03:34:35.400809Z","times_seen":16750458,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/new-releases?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /new-releases?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MrYBkhsaUVS47eZGTEw2QT0CK6pAt2ngrmqBavgxlgTabjJRQdw1XmJ3O4PzpFMmeD7F995A2iJFmobbivnilz977s%2ByE3JwRidO\"}]}\r\ncf-ray: 9d7952c18d61516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2945,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"17e9461e19066aada8d8861af6029450","sha1":"b29220cc327332979a2774aceeb8c830e83aff12","sha256":"81a020ad82b4ee1f98eeb0020a11c41fad14fcd557526e7f1e419f1f764f133c","sha512":"eba92346127cddc18a75b8272ff9b56a37842af438128081e4557cbee225931edc9a596e0f5a72f5b80031e78a595fc99fa8ba07d5a8460d71ff81abcfc4ee65","ssdeep":"","tlshash":"7e510f3f8701edde579b466500ebb349664c473b4710ac76c4ad4d0c238622f1f31ba1","first_seen":"2026-03-05T13:04:34.790568Z","last_seen":"2026-03-05T13:04:34.790568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fhorceracing.webp\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fhorceracing.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9991\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: 8t_7Nb36VAzLmKbzxfmqIPuduN-JsS8NnJ2qM8lnH9I\r\ncontent-disposition: attachment; filename=\"horceracing.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyNJovHzg%2FVwEziGvP4PFYHuFwdGOGI3tjzjFPZOm1QZogA5UTb3ElsJeCVIne1BBRsuRNJPq80bKVnnapdzGEHIgNgAR%2BWblMtQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfad00516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9991,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"795eea1c72be311121d61c6b82f788e8","sha1":"79f1e59c1707801bc757ac6f6d6ac00bc20d090a","sha256":"f2dffb35bdfa540ccb98a6f3c5f9aa20fb9db8df89b12f0d9c9daa33c9671fd2","sha512":"29d14e6bd7117d61f5b8c1ee1c3a6162be96bfa9c5974167fb6c7d2e26079f9bdda0cae2bd4c00dda27af094a490c6386dbca4d68e9ce3d4066e08c355685e44","ssdeep":"192:rGPvPkJ8shRMtajQ4YQpBv1u4R4P0lkAsts94SsFcTsvW+2wKqj+8Pocfk34c0o:rKe8sh8avpB9U6ktsMcIW+vb/k3D","tlshash":"dd22bf24b1509f62d01500f5aae47e6629929ed3dd37523a8c8d7c4eed30f72b2d4cb8","first_seen":"2026-01-13T13:58:34.422271Z","last_seen":"2026-05-28T13:56:00.832296Z","times_seen":209,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/56e67c9087d6a5c8.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/56e67c9087d6a5c8.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"3439b-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a92fqgsBF4e4DC94deMAP9LRxwcUaCCLgIEhrPyTEADVUKjDpw49HHuBH8BxRbHP8NdQINqxReouQfaq1K6wR5H1ReQbiyBSqAgA\"}]}\r\ncf-ray: 9d7952a858c2516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"37a07820d50dd2e88aa5fdbd0a73c52f","sha1":"fa146c4e19d10c1ca936e7a343693326f3d10379","sha256":"73fc269567d6e33502c6d35cfbc3cbf447c2bfed6a5f5272f7825766f0affe79","sha512":"7508160876580439e1a08451f6182cf448581937ccf6ed7fda257645bb804a01ff4cab61af40ba189cbb8ec2f0bcc5e072fd8c6295f69e3d9a60e77ea52f0e7d","ssdeep":"3072:CH/apcwTasn5pRs2naYLlbskmz/pFdE/Y:CHypcwZbll4RxFdE/Y","tlshash":"72240ae83d55f6626ab302b710af1803b33c252b280d4d60a611fd9db57845fb17bf9a","first_seen":"2026-01-13T13:58:34.394009Z","last_seen":"2026-06-10T03:58:03.888508Z","times_seen":228,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/turbopack-67b6a3e8a95fdcb2.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-67b6a3e8a95fdcb2.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"26da-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeBac7jvWhSUcsZrLKQ47rPcUDmSbx8jw94dHn7z25gNbG5uAeMEzQ%2BSojgaSAMGXWudDsDKdz0utfW5oPirMuYy%2Bm6Cg5QFnV3H\"}]}\r\ncf-ray: 9d7952a858c5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6159)","md5":"432a4b6b685da118c4f96b9b4a38cdc0","sha1":"e03481bed34a618b1c798b18980de607e36720c3","sha256":"3779233948512f2041b7ecc1cdebe3446d4f4f9cad0ea22e20a8cd16ba277d53","sha512":"f12e0be1ffd130a534b7b2a4e0d3ac2ce342a1964dc9dcbc2f97fb70f0a8f97ea07b3e7cbe05165970ed7cb34b29b7fc638e2b077cff30552745db9e0cbc2ef2","ssdeep":"192:2X/IwHG+J8iEsuRn6EY8iaWkUmlGVhFd2mcKW9PZPKFXVqXmZ:2X/IwHhyXWkUmlQ8mcDZZyd","tlshash":"8622c7da37a6f07343afa1e7803f4144f1798869146d581c939ca8fa28784ae45e3f37","first_seen":"2026-01-24T14:43:36.897452Z","last_seen":"2026-04-09T01:34:11.85938Z","times_seen":210,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/1a789260da75ea20.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/1a789260da75ea20.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"3378-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8rIz4ThbJzD31XLiwl0nONR2ZzZ1c2EAkSwRoKomd4SgMYS4LJxSwt9ULqMFamVeV4CqdlpPJ47QgzHjpYka1Nd52Qy37C9id2Y\"}]}\r\ncf-ray: 9d7952ac7977516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13102), with no line terminators","md5":"f987b8fb60d2fe1714f174ae976e7dfa","sha1":"5c0370525ab8b57237083920a02766359338640a","sha256":"a57c4ec3f9f96d29f5998fbeca741af3dd39b17c0c3a4778d55200c9fbd12571","sha512":"38f7692f6858dfc3385beab48c16bf4e032cc2a8f57f77db9df1d8ea246dfbf33c4c474798416b800e83e2c19e15a5c5195ffd2ba7b1f2ef766d2fb690fbeb74","ssdeep":"192:yGZic0tjr2xuLKiyxZuWJ15N+vcg07Xx+filJbSbZpddtCRtHksWh7XFUQL++PWF:hZifuuLKlZu4Evc9QSM3tEtzWhl3mR","tlshash":"3f42d80bc62426f127ab0173364f79a2bb31942d6ff4f087c819d12c23eba1e55375a8","first_seen":"2026-03-04T16:26:32.9581Z","last_seen":"2026-04-09T01:34:11.941917Z","times_seen":17,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ae27942b7096491c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/ae27942b7096491c.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"7ba-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJ4DlXtmSd9uDAGfNRWnbS3mnHfOk13kSSNCMmjGhggm7mwcvqpOa75NiJTBOfhm2ZZ5O%2BtxPRsiFWiNE0ToKB66WtPnmEsu67ki\"}]}\r\ncf-ray: 9d7952ac897e516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1978), with no line terminators","md5":"822da84f8ac41fc80b5fd0783c88b282","sha1":"56e1ac390f64ced857c1daecced8fd5104330e30","sha256":"2523768f0fe0ed586a3d42ac371eaa76eb5d00e5058c7376dfb3e14d4707ae5a","sha512":"fda5f5359cbb1a7acb4f4c325841c6dcd27b92a25cf250edf0f84fa9e5dc7bc809de085322ed336f768e911bf0d0f000637b6332ebb2724cf173fdd71e1401a1","ssdeep":"","tlshash":"4d41349bc509961a1bd3432efcc15a86bb36211a8eeb25070dc9466302607bce35b2f0","first_seen":"2026-01-13T13:58:34.516024Z","last_seen":"2026-04-09T01:34:11.903751Z","times_seen":212,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/11015398626c7a13.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/11015398626c7a13.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"1afde-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nA1GDQZ7j97YuO9DF0a47Duzf%2FPYmdeaOzcg0AH4KUinaOEAENARrSF7eae1W4j9v9ct%2Fxan2ikMGJEiH6F0%2FapHFPwwib3tsCVs\"}]}\r\ncf-ray: 9d7952b24acf516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64352)","md5":"b7f51f7958b0ad7b1bc73777b57a3a7d","sha1":"519e5b7857b8d029545e62fe4e82243b8f74fa7e","sha256":"240218fdd4292968f362c3099fd82ae117013642100f5090ed6d6910390b7b85","sha512":"0200ad238303787fa699c54ac2681a06e985ad0015775db2f01b2da0796036c36f86fa35d478b323c845c49214d013c60fb9e2bb5bb2f1d317a14afc2b9328b2","ssdeep":"1536:QJrGFCLLa3NkeP5sUtM+Lq4RV1JdOyLS14Z9wGIQE+rJiB7:QYnR9KbQY","tlshash":"60b33de0335475f4970742a5907f810cb12d79bcda0ac858f27c7ce92a349c57aa6fa7","first_seen":"2026-02-18T18:42:32.56362Z","last_seen":"2026-03-15T20:04:55.121562Z","times_seen":12,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_8.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_8.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"03eb67889cdedb47446bebae7f4c3d67\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FD46B9AA\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3yfI6jTSjyOkFGcXLModl3ZMH9QvQHGodU6RqQh8b25TQ3TDusOkyw46cisFIiWMD8hyUJrUzX56%2FPtdSscXARILXRkgHJqgRBO\"}]}\r\ncf-ray: 9d7952b8abc5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03eb67889cdedb47446bebae7f4c3d67","sha1":"fe39de9716946d9fad93fc7bb0fc2beeb824f4b7","sha256":"24324b25d73d5772446a04e5b3dbe9ec114d5e3143a83a18b2e439d0bee5ca1a","sha512":"497723d2140f1316576a08fcf90cffa38ee5c0b3c6380087b92982c6d0c2dc9e3f2dbe80fcd0b8ee5730bb8f3695b55071185659e31dbe2b51e44c8bc8463337","ssdeep":"","tlshash":"f18154d7b7e9f3f02541fba8a1212021b46a30bf7f49e6ccc2c15a609b5a4bd818ec41","first_seen":"2026-02-18T18:42:32.407493Z","last_seen":"2026-05-28T13:56:00.611522Z","times_seen":16,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/c27b67ef6a0f108f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/c27b67ef6a0f108f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"2b7-19cb66cca88\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZYg2VTH4QHcQXtmtdWO%2BVUdWJjq7J%2FyBuhYligJKM2aZ3xREQaNYKmKRwFrt0CUhG8q7DjTJUA6KShnECR7g%2Fl2Nw07QQp%2FEEle\"}]}\r\ncf-ray: 9d7952abb955516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (695), with no line terminators","md5":"ff0eb9aabbdb9fdc6ad98252b61c506e","sha1":"0eba3616a5030214482282cc168b067b5cb8c4d2","sha256":"c44cf68447b11b233ac9a9fc6ae9971e30f6fa7947a68e75ff0d8d319b567ca7","sha512":"2a7d015993fc6f1f48688f90725641fdef481eeac34eaaafb4c95235159af212e574526e874aa5d8b8f00777308b2b841bade1f9bddc66318f53b99c23d3affd","ssdeep":"","tlshash":"7a01cb16404aa9f41403532ce596333e76380ea7c0b7260be15f272ad1f0d58628b238","first_seen":"2026-01-13T13:58:34.497392Z","last_seen":"2026-04-09T01:34:11.899423Z","times_seen":212,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/profile?_rsc=p37cr","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /profile?_rsc=p37cr HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yuPFbC4nLVpiYs%2BCkALdJDseqkgMCZis1y0ai9ateIxIy49Z03tgaJ0H9H3iH7vaFDej1pzUmFwZRmAkANJ5oYTk65QBgsm%2BIr0\"}]}\r\ncf-ray: 9d7952b06a8a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"c8b8dd8587ea1fce657c0e3eb202f928","sha1":"1f7a91e28ba32ab628ea6139244ebdf009d5c095","sha256":"c56b6583f2d34c3f418efdb07f7a9de66c9d88d48324a94dee284e524d86548f","sha512":"31202ec8245899f42f857bc0671193f53a8658390ea8d6bb129fe62013a847f78145dcf6931a8cfa1f02b16da4130a60c3699656b6be035f05955ede7bbfac65","ssdeep":"","tlshash":"8a51103f8701edde57d7866900ebb349a64c473b57549c6684dd4d0c238622f1f71ba1","first_seen":"2026-03-05T13:04:34.800235Z","last_seen":"2026-03-05T13:04:34.800235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_3.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_3.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"4fe76edd8b0be1e2e76e57c247bcc4f0\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FC969192\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdrHjJIf6n6SZREf4PS5VE8rZ%2Fzm7rcrRvdy4nTeF9iWsV6WV9kP6nHQAM%2BZZWwwqUwmJ90M3grUSCBKaFO9eRLplYcTvU%2Fi5%2FNQ\"}]}\r\ncf-ray: 9d7952b89bc1516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fe76edd8b0be1e2e76e57c247bcc4f0","sha1":"f2c14ff6cd33058727e79325c349366323020caa","sha256":"e42e9a79fb7b8800ca5532a6eb2fbf9836f99d75b5b571699d74efc2c3916976","sha512":"24afd7ae94da14a024ff82a051902de359a2d6d1d537f0ebace91f1c4c0cf27f1d1fca5d018b46459a677858426d8e0350aa71ff4e58ec5cc72c57bddfe6a084","ssdeep":"","tlshash":"956164f6f2d4f3c1e14ae774d8224432b11f31bd6fafea9682b05fa4a650189858dc00","first_seen":"2026-02-18T18:42:32.456328Z","last_seen":"2026-05-28T13:56:00.78416Z","times_seen":16,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1ea-1f1fa.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1ea-1f1fa.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4sK1Cz3BV9QrT7f0%2BqTRClGhPxnCFoPuXSZ71tPbzReljeoQwzFlkCoSAyDnMMr9dTiv4onzzYXu9elZqMw%2BEvxLzg6VMPvkErWKDsjNol9\"}]}\r\nage: 15522\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-500\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d6ad9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4be7421b4e5f8718344dffd8549333e9","sha1":"bdf20eb823e0207e0dea8b11ad82ea3f7e34ab96","sha256":"8826daac160252ec5a3242fa37081c8e255efaffaa2c228b8499338e7e8dfa0c","sha512":"e65d34325715eab2b650f6f3148c09425009950781f930e5d31b862d9c7243f1ed34b4038ebd04b755ba567a657bcebb166ebc663d8187a1c67d03f1c58731ba","ssdeep":"","tlshash":"6721a79605f0f7a5ceb3d7075f12f5d2684224ac42f41ed2d099539680b3aeed2aeda0","first_seen":"2023-06-22T16:34:30Z","last_seen":"2026-06-26T22:14:45.974481Z","times_seen":201,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/promotions?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /promotions?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHwmD4fLjHq5tI08eOQezISP5FX%2B%2Fpto%2FC%2FYBPU%2Ff4DAyWHFCO3kj45SdKKfi5mQvqmNPjR%2Bnoue%2B4Z%2BPlruKGNnZYcvTK%2F0gcQo\"}]}\r\ncf-ray: 9d7952c0bd31516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2943,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"0eeae2661633da1e0b25551617f6658c","sha1":"c4a68c0a03769b069cea6e81ec5f6a8081702b5c","sha256":"7efad1aa3c9e33f52a6a5d59aceb605aba61c8f503ad4bae0dec23bf6ab8edc0","sha512":"3bbd16acd8a6483eef43d0540053630f243b2aa46898b601b6e35c1c422d52475d5244132296dd6b46535ae08688fec2a503ef54fc581fff50120cbfbd582cf5","ssdeep":"","tlshash":"d351e03f8701edde57d7866900ebb249664c473b57549c6a84dd4d0c238632f1f71ba1","first_seen":"2026-03-05T13:04:34.804463Z","last_seen":"2026-03-05T13:04:34.804463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/9644da4208edebf9.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/9644da4208edebf9.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"12081-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWgnP1rvjL3Nsf3MErSwk8yz8hpgircw71kIgmyTvyAe5kWXfagal5MNJlMufhaLHBH9gGZIibGYxjkGHaeSq1Rko0qNLXPllry6\"}]}\r\ncf-ray: 9d7952b13ab6516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73857,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36380)","md5":"edfa2e8903e1a70ff7b88ada842b3ac6","sha1":"5c4c7f35fe90ecab56c73666cb4d1c89cfb467bb","sha256":"2669830fc9125adc4eabeadbc297c953b4272b76187c52bef1def4aa0add2f6b","sha512":"8117dc52f82ed7993063ad72cc984c9e095d4d780f19f5b2b8618a854c2e22bc6217c67bdc5950c912d58e2db88b31742e2eee71907ff2f9becd3a657e2b5718","ssdeep":"768:6DHr5myKUyESsjVrzATHIhCcRShYZOBunUxKRZG2AJUyH7Ha2ZNU3yjCDU9Uh3W/:6jr5qm7jVrUTHxcRXZGzJn7B/4N2fn","tlshash":"00733a5b63215eee753e23d6dd6f8e4ca04e29636682d538f7febd4127000c55aa0e83","first_seen":"2026-03-04T16:26:32.948656Z","last_seen":"2026-03-15T20:04:55.063808Z","times_seen":7,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/pub_bets_by_domain","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:57.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/pub_bets_by_domain HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:57 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:56 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YU8dfC7TxiP%2BWVFW2RBw1COL3krs9G8sZ2aAmHfnBpFPLjJAtnHMCvnEocROa3OF%2FibNdsqjyHbWzCNQMOaH1zS725Gudo7VeJNx\"}]}\r\ncf-ray: 9d7952e1595a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66752,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa81e468bb82b5f4bfedeed97341c34d","sha1":"2d63d483f48c3b011550fbb7dfc63e010c23425e","sha256":"23be039862dad915a4ebcd0907038acc468dee1a8d7153f01cd0a54dcfe97931","sha512":"49b992fe1bf15d8f10ff99370f88fdf31a686ffb110564708bd2345d58825151274e21d763dccf4874884f09510aebca6603cb57b6618a5bb9f5ebb5d6181846","ssdeep":"1536:1uzMvqzHASk2thvUrw1ScrUeik9o8ohK87UiIzCsAioOdlyDj4:ZYE2","tlshash":"e263ef2915234ce84fe257c4bd827a0925ec0407ecfeae45d5feaf09d1ecdaa9335909","first_seen":"2026-03-05T13:04:34.808695Z","last_seen":"2026-03-05T13:04:34.808695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3f787267c4bb3269.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3f787267c4bb3269.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"1fc-19cb66cca88\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eALqWK7%2BRXRdX4iGh7iNaByCfj%2FbmcSbvr3LBt4ZwLDK3EHMQh1MRxx7BhJLfEmnagJsvRU0biPNWdLs4Fcok6sUWe0zTJAKTo3\"}]}\r\ncf-ray: 9d7952ae9a15516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (508), with no line terminators","md5":"9a70e838cb6c236474e4ed529f94ae28","sha1":"46cf97324f59980177e1693482609bb8632017e0","sha256":"3370ed272581b16bc4c49faa4a2984a010ef8de7a3b64d3803304319dfd796d0","sha512":"b6b5c156d9a6d1fb133df35aad8c76184bdca5d18faf5bb0cde0bf8b7fe7a7a15bed51d0fdf77f92029035b9aa53f3ff1f9d9e4156ccc2449bcc20ce7e465811","ssdeep":"","tlshash":"03f09e2809516dcd1c057a7cb864af46317418a640dd8e1c2afd4cf892f7f44d8250a8","first_seen":"2026-01-13T13:58:34.39722Z","last_seen":"2026-03-15T20:04:55.02275Z","times_seen":211,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/domain/settings","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:48 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZE%2BPZg0bwY7%2B%2Fg1XxvfrNUnU2YAde1lzh%2BiS2sn5NLZ9O23fGd8bU5Zd3D9WjsOjcbmobRAcQjNn92e8EotMCIQ5ICMx4Zykmff\"}]}\r\ncf-ray: 9d7952affa7a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"21b28798270caed16be16a8b1760fb21","sha1":"41a414fd2c7a043ada1fa014b8553c905dafc65c","sha256":"7c74caf79a14c6d1a39fa5f0ba512624b119c7fc1a5e5fa795c81888115addf5","sha512":"c9f7220fe44f2a45e53acbcad210c612fa0e9ca167184c64c8a68ebcf3aa80db6fd1234d0a598559b209874e97cd897bfd6f27347c04c6d00ee9c9dc9e772378","ssdeep":"","tlshash":"d7114e2e485439bac5c5e61adb1d3d074e3ed17762321d35b79cce3412fb0761628a27","first_seen":"2026-03-05T13:04:34.811754Z","last_seen":"2026-03-05T13:35:40.235613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:56.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:56 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:55 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGjW40NXlAABmQfLZfFMQjd%2Blac5AA6V696Kx6BYYDwsLRUfB0v4OFyHeqM4mwaAjEIxS9sLW%2BjcQQ8muIaTHYuy4nkGEyc7aeaA\"}]}\r\ncf-ray: 9d7952dbf8a5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9414,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e6fe0f138e602f1069c9ce1804f01a4","sha1":"d8df08bf0eafea044eaaf1d79e67f2a807ef8e09","sha256":"9d61c46b56443d8b9117c4764460c9c47f3e6f2a4fa96420abd9bb7bc656ec37","sha512":"dd84dce8bdfc0bf5fb767869b8ec64b86bca663b003a7be05ea2e6fbf8a3f174c9014385a5015341fac31cbfa795fde72da41914849063ea4dd1e8d6d93629a7","ssdeep":"96:c7p/99CcJFriiI1VhymLXX9efopbysSyRZzYzBNC16VKrRbiRUypwiXMCo89MEsv:WfkXoC57","tlshash":"381204ae49122d8f47565ae07762236a64a00005af872e4ef8fddbcfa1f73ea4730145","first_seen":"2026-03-05T13:04:34.752807Z","last_seen":"2026-03-05T13:04:34.752807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6cec91c98d688ecd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/6cec91c98d688ecd.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"19228-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgM2LKHsoqtoSm%2FS0VghkqHsRsRpOSglfRvj0%2BxHQ9M2L6qToYwaCl7cZME6n8kfA2a3P%2BOupOU7xRR5hAT7veQqkvrwcXeYa5ud\"}]}\r\ncf-ray: 9d7952b58b43516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62772)","md5":"6ee8b38c151c60720027b8e277413502","sha1":"2d8ad0c1f655fa300b6fea3ba9636173615ca100","sha256":"0924557938dd8e1db1e02ff3a5f83c89f52b7ddcf0fbf696800089ba4901d7d2","sha512":"45347972db7f1c682aa564fea4cfda5fcf28fd337d665410156779ea58e5a729537d1ca71303ec0c2ed09f90973ed986929be55176deafb6b0ba846d8b794441","ssdeep":"768:Qf4TuqQAQhJ0yB4du3l72F5UgsXE2pLp+fhycJsK7KGMM8GoVYqN4V2qN4IkZUNI:sAQ72F5UE2D+pqOWYJ2L/UPsXBVZJ3","tlshash":"6da3a7b84560aaec765a09a4706ed19c701b3b9dd9d7ce18f4397d4b29800cafbc2f47","first_seen":"2026-02-18T18:42:32.557713Z","last_seen":"2026-03-15T20:04:55.07453Z","times_seen":12,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3media.247sports.com/Uploads/Assets/767/636/13636767.jpeg?width=1200\u0026height=628\u0026crop=1.91:1\u0026fit=cover","fqdn":"s3media.247sports.com","domain":"247sports.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.247sports.com","organization":"CBS Corporation"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Tue, 12 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"85:D0:0E:84:0D:8C:D4:63:A0:FC:BB:8C:FF:83:4A:06:69:87:7D:BD","sha256":"C8:50:A8:53:28:6E:D3:EE:5A:56:26:CC:19:32:96:95:C5:3F:E2:5A:9D:91:FB:41:31:32:1D:3A:C9:C6:82:69"}}},"request":{"raw":"GET /Uploads/Assets/767/636/13636767.jpeg?width=1200\u0026height=628\u0026crop=1.91:1\u0026fit=cover HTTP/1.1\r\nHost: s3media.247sports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\netag: \"kadcJpccOmkfGP3AYSapz+i8fj0MKBR1ZziqTzk+UIA\"\r\nfastly-io-info: ifsz=262144 idim=1200x720 ifmt=jpeg ofsz=122644 odim=1200x628 ofmt=webp\r\nfastly-io-served-by: vpop-kiad7010246\r\nfastly-io-transform-stats: ifsz=262144 ofsz=122644 ofmt=webp\r\nfastly-stats: io=1\r\nx-amz-replication-status: PENDING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZOOsMVBIHdpc.u6UOQ8n46FEhUu6Nhu4\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-CDN\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nage: 121979\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\nx-served-by: cache-iad-kjyo7100128-IAD, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 24, 0\r\nx-timer: S1772715831.148415,VS0,VE1\r\nvary: Accept\r\ncontent-length: 122644\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":122644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x628, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4ace3e32818bf7013e0c8852f868758","sha1":"c960cb3f1fbe15ceb400657ad6e471987f19fb17","sha256":"244569cf86c713cc0f4a8e19825442fc1cea50d863b1244a11d70dda96a7bcb2","sha512":"39d10d87020074a79131fa7be4086699e92a7121f6c63a77d610f66e84c3331c16779c1f99c79299f3cfe7407c9b263fa697663cae7ae25997450059bd93ba68","ssdeep":"3072:K6Pxs8dM87HnC/4es89svxoAwOQae8a6rift2v2i/wT:/5s8dvHCBj8ayI2vH/m","tlshash":"81c31279f7afd57aabc7845a24a6a0025e1c6c6d2da75d1cdb0c7bb9013f70c65000af","first_seen":"2026-03-05T13:04:34.81457Z","last_seen":"2026-03-05T13:04:34.81457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":48,"dns":1,"connect":13,"send":0,"wait":15,"receive":29,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/2bc53bbfaac611ff.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/2bc53bbfaac611ff.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"11b-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BcNfRFEoEBWyJ31FrSM8uazBBmSfC8YOMZkF%2FRtfCRwQgS9GSTjIsu6qWpIWngnhJliqCfVIPVRYbPd4IAdTzZrzd8kevroDIIZ\"}]}\r\ncf-ray: 9d7952a868d5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"eb3b5cce160f2d44444de994c9921c40","sha1":"9813bfdff1e5ee5e8744374a3f6a1bb9d6f5df40","sha256":"abd06ab35cca99c1cf56473e473187d8b7b6ea3a062f4af970cc2000b3b1dd80","sha512":"a6577f4fa3ff6e5b20200bfc7c1df1b3efcf4d320c5992426caff2e37eb19393f7c7a6e4953f3ee4f60620accb1180978e02c5b9340a912b125356557041448f","ssdeep":"","tlshash":"b7d02b703150f8d44086a0cc8836424bf53a757262fe3495d7ae8cf16174f5d51e1a55","first_seen":"2026-01-13T13:58:34.452804Z","last_seen":"2026-06-10T03:58:03.900596Z","times_seen":228,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ca924d08485cf23a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/ca924d08485cf23a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"f7c6-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krL%2B8hrxPE0xXaiQ56uT8jwD2P9sC19kNhpL2zLkVQmvzvI%2FKujiaw5gyTfhlYhhzdUwvdzLBaUf9LO3x2B9r88KsH%2FYnsip9yqi\"}]}\r\ncf-ray: 9d7952b12ab3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63430,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63424), with no line terminators","md5":"1f8ff2268083adfe6bc91f9ba3a56aa6","sha1":"93bf8cc4599ff6110badf5005c557e3ac4a2ae48","sha256":"8dd3d37bcb15facb6c46925b364ea6c605f7d5f893c950e6351cbaf6ebadfc2f","sha512":"02decfc42aa3a459f37cf0e43486064c9040e4a5612a075ee177eee7281f877373955239c3372e53ad68ca326d4e77ead774ded1edfa6fae2906b2599e291077","ssdeep":"1536:9X7tPfe6Rboi+h5m4XDd6tuyxo4fJV38OQJxcfUFkwn/OAwg4Np3nbVE69hCfXPy:SGJ","tlshash":"f7532cd017ac27ecf09a0ed6b116851db95f10fceb4ac724cba6b84421518d26e99ff3","first_seen":"2026-03-04T16:26:32.974905Z","last_seen":"2026-03-05T13:35:40.33421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/games_by_category?category=Recomended\u0026limit=30","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/games_by_category?category=Recomended\u0026limit=30 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:50 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNsRNic65pN7X1bLJ8APEVUrAMzSPR2uQT5iQ2eDN9p3%2FH78p1xHWY9C1fnET9VT9oMZUdrG1GLjZ6w79BQhNg7a1FK5AeyBmu3P\"}]}\r\ncf-ray: 9d7952b7fba6516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5294,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b50c1d739ba19e6213fd86153543cbd5","sha1":"cf9fb52bde02aae49531b67c22c3ad24e55333db","sha256":"74dd88b6ff194ea21fb3676d977423b35b61d1f9050f0f4d9ae63f081020d418","sha512":"cd2b4e1c327998f70cf03f349068553999ad511e49a093e510a4eee3d5cacd3bf5521c16bf6ce167afdbb7dc7b1c91132c62ca9e6498e6a8bbdf8996c129c718","ssdeep":"96:KH8skPZ/2kq3PYsPRtmaymCyT5tJTqdjiAJNmXyHhTcxNH+OM8Crj0a:QHiQTQLAnNqdJkK","tlshash":"15b15f67ce3c5dfec3182f582dbb9246d09555999fc4da5ac8bacc35caec49b03390a0","first_seen":"2026-03-05T13:04:34.817544Z","last_seen":"2026-03-05T13:04:34.817544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_9.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_9.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T03:34:35.400809Z","times_seen":16750458,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/48588e0decaf8cf5.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/48588e0decaf8cf5.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"627-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FyjFMO4Um5WwUAPqxQY6ZZtFfG%2B1QwZBTQ1Kb9I%2FubAqDbCxaJpP5irwFOWvFSxRBsfFBciKEk%2FgN3LQJAK7%2Bm7pP5efUmqYfFF\"}]}\r\ncf-ray: 9d7952a858bb516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1575,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1574)","md5":"c50f5acec3948b0dca5f7b44510afea2","sha1":"c3ca6a42f9cd5b9ac2ddb7bef515fe3cee9c04d6","sha256":"c4c4901090b690eb4c495e4da4ddffc8964b2be727128aa8c1eb88a92fa3fcae","sha512":"f7a67ad2ed69fc996601fba9f408198f9aa454a5f3ce9ed8f10bc949e7a856aa4df257e94d1c7d831d139c0ca15aac298e4bb0a9a94384c47f7d42a9d8cee4f3","ssdeep":"","tlshash":"d431df92964ef394f822584d5158b6be1a3dc247a3171f79dc98eb3392c63c74028617","first_seen":"2026-01-13T13:58:34.506606Z","last_seen":"2026-06-10T03:58:04.065284Z","times_seen":228,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/8ae6f7be38dee493.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/8ae6f7be38dee493.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"3f0-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUZ%2FWUDnmveeon6QIyZNUPlXI11U6nedsUwCSUU6llWRdCFN1TyVNpwJiWgBCMIaFFy5nInrp51W8eoGA6jUmdq9l%2Fx8XW7p9EAe\"}]}\r\ncf-ray: 9d7952ac797a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1008), with no line terminators","md5":"f1d7ce5a2f251f131abbe8bfa423023b","sha1":"b36f7df6b59b4eaeff16a5bb737f48401140d7a5","sha256":"f0b7d7d15e76e1fd0f71420c765220985d0097295c17d882aba1c30a31f54c96","sha512":"fc8376588419d7f170a556cacd68eea37cf93d1922bba16696a0ee78abfa7c2ad85da13c8bb19e6c9520e8c04304ee37eae02495ad28f8119345673f7e477e76","ssdeep":"","tlshash":"8f112588d70d09a80997b33275c5b49175a019d8d0d6401be9df8d3882b5f2e96db56c","first_seen":"2026-01-13T13:58:34.513369Z","last_seen":"2026-04-09T01:34:11.906493Z","times_seen":212,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3462338d369f835d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3462338d369f835d.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"22a-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBFJe8JNW%2FA4EPFFpbbWK1BwyKPnQL9jdex%2BOofJapRuQD2d5W%2B2Df%2BEgZCBPdySGPQONk0hP8bVVezSsOQhpA7fEWQZmxScEKL2\"}]}\r\ncf-ray: 9d7952af1a58516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (554), with no line terminators","md5":"6e553e02e168916bc3cb32361065c02d","sha1":"987728d7b21c06dfa8923049b52aca587eeb141c","sha256":"ccd3fb2588cb35bdd6d179460c94c22df80aa3bbc12bcb026b7d4a3fa9a6ada9","sha512":"a289a53e2f36aff190ab1e5d40e4835b81b3d70e5e74bc858ba2d9922f18649ded88da9be77bedf1028a3d56b8f54d78a842f013c70a420b7fe746360b2a8fcb","ssdeep":"","tlshash":"8ef0c9ba8055484c74003b3990e0adc538f819b698facd12bd9e47e8b0bed14a5019ba","first_seen":"2026-01-13T13:58:34.392362Z","last_seen":"2026-06-10T03:58:03.917691Z","times_seen":227,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e0e9b5475e499cfa.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/e0e9b5475e499cfa.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"89ee-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2InO3TKepsUdL%2FOIHERkis6yGG2s%2Fe4AyPW3u9yIh5%2FxrMmbi5Mxo2Bd3t8SKWNo8xIyQM7wzWqF9W8tr6pJue2N30n2Hlj%2ByFQ\"}]}\r\ncf-ray: 9d7952b11aad516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35310,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35294), with no line terminators","md5":"41e0821ff365695cd3fb425fa2397a04","sha1":"54a3ff065fa647f12b34903c79cf249e17738ddb","sha256":"5f0508e16fb7d459650d9137fb1cfa77960024654903ddff15dc7639af8a1194","sha512":"1d13ab08c045b72b8089c04cc774b2e2e1e1e6c087c85543e1f83c1fb2faa639d8446809019265935db2c71d3250b47e1fe11e9c5a4a67d7f4cbd033e95827c0","ssdeep":"384:MOfF6+el4eTGrk8vX+cDPh7fHMn4nO0PWzZIBnTi2VwhRvPa5GpZ:rI+xvLPRMn4n3nTruEeZ","tlshash":"bbf28325a0247ef9b71604a4b96e818c302ebf58cd5f9a94b2fc7c1a17448c07e97bd7","first_seen":"2026-02-02T18:35:49.630693Z","last_seen":"2026-03-15T20:04:55.024349Z","times_seen":14,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/home_by_domain?isOCLimited=true","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/home_by_domain?isOCLimited=true HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:50 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BOTMsRl8LUvYW%2Bo6FMXYura3A2gw2vdaPocCdJtmZHOHlt0TItH7bzIi1NJqhLI9rSl7dhYf36qAM8LoYT8rlf%2B1IOISjxUA3n3\"}]}\r\ncf-ray: 9d7952b74b80516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777392,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"706dffa53f41db45ded7694e2d9d30fd","sha1":"79ece0df8f808bb29fa7794957f5ec30ef1516f4","sha256":"d95e004028b57c3ee50764cd3a0d83f5bd3b51ba05dfe2974bccf910da7309fc","sha512":"1f865a3f3f9265ae24865178af73fc9b73e4ebd0cc226dbeb624c66d1057bf7b2f039550e2f6c0bb59d71ebeb0eade0b850133fb092046d7c030cb46f5314d92","ssdeep":"12288:gtMq3S4qWdiXmyAC67HbIsz3wg18FiqYC2eniQTvkDp2w8xy1iEer:gtB3S4LdUmYUEywFHYoni6pr","tlshash":"1df412588da36cdc43f546e0b0ef6ede7eda025ba8ee9c05d7d42d5640eca9392f1018","first_seen":"2026-03-05T13:04:34.822578Z","last_seen":"2026-03-05T13:04:34.822578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/vip-club?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /vip-club?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEBBBkSVpzg7yDHBUvobKKuNhqEhDzD6GDF1R%2BRQ1PA7kbsYKHJnBSXzT%2BH1HKw%2FVmG%2FRNsvHhvZ%2FrMalhJyBcHl%2B9hw1fJmn7da\"}]}\r\ncf-ray: 9d7952c04d20516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"aa7ce5428c4c61a3082865faf879ab4d","sha1":"bc635588669f794ef1e8bce414e19c2f420fa1ec","sha256":"645a556feae79700af7822679dcb29db639b518e3dbd6d57e30d5c2276df794b","sha512":"d2e494580a6f1ff88a4699e49d315c58d0b6141c8cac9e0e88f8355b1c3b8fdf1362be4028cc977c6677666596bec02f177bf4738c8992f09f89166f07705705","ssdeep":"","tlshash":"c7511f3f8700edde57d7466500ebb24a664c473b8750ac6684dd4e0c238a22f1f71ba1","first_seen":"2026-03-05T13:04:34.824256Z","last_seen":"2026-03-05T13:04:34.824256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0ae4c2ebbf3c8f80.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/0ae4c2ebbf3c8f80.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"8dd8-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pq6oAs6w3bRvgDvfT93tupJ8x8cGOgdP%2B5dV93jR9WTmKKjjbIas%2FQIc%2B5LQjzuKoPOgOPp8q7R8kcZSNd4EvUDR3cWRRX6XsqOO\"}]}\r\ncf-ray: 9d7952abf963516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36312,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36305), with no line terminators","md5":"f786781fa0139399c4b07c3def81cb2c","sha1":"f12b9cf0bd3b8d42aa3dc179629d4e8fc203b199","sha256":"95b2e8a5d1a8e35d518f660e97770d8ff83f17b62bc103c9b19959ea924db102","sha512":"e59b1cac732294942803051c56bda51d0d360e90f1320cd3e6f7722978b53d31d2092aab9ebe57e0e1750da96aaad3cbc3c9843fe88c8518eeedc37cb983bcb4","ssdeep":"384:GdEvy3EVWntvPSBAXKfoPnXBdY8+RO5yKNFaiEMEEgYAvJ9JU+k76DWAC/+kp+Vx:rkWE+k9NQFJg76rgp+Kbe4F32","tlshash":"cef218d8b2c3b028123364a9007f7117713ebd25641d8943e52bd8d57cb6e9a923bfb9","first_seen":"2026-02-12T20:36:03.574035Z","last_seen":"2026-06-10T03:58:03.92414Z","times_seen":56,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/domain/settings","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:48 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eYvDHTiZ88gmLO9o2ztdBw336AIKE6eX%2BrO4wLXPrvYEIt3iRWv%2BEuv5Q8I8cSDIgtUWu0Uf80d4V87xQiNcsuFHUpvdJC96wgm\"}]}\r\ncf-ray: 9d7952affa79516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"21b28798270caed16be16a8b1760fb21","sha1":"41a414fd2c7a043ada1fa014b8553c905dafc65c","sha256":"7c74caf79a14c6d1a39fa5f0ba512624b119c7fc1a5e5fa795c81888115addf5","sha512":"c9f7220fe44f2a45e53acbcad210c612fa0e9ca167184c64c8a68ebcf3aa80db6fd1234d0a598559b209874e97cd897bfd6f27347c04c6d00ee9c9dc9e772378","ssdeep":"","tlshash":"d7114e2e485439bac5c5e61adb1d3d074e3ed17762321d35b79cce3412fb0761628a27","first_seen":"2026-03-05T13:04:34.811754Z","last_seen":"2026-03-05T13:35:40.235613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/notifications","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/notifications HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REB2K5dBD6NGKJJo9nVrOZ9b8NRFGn8r%2FOSrFz%2Fit%2Fzo1hi0DTLHiF%2BISD88NIIHs558ku29fKimqk085XjMcLPdbL6p6H7RN2HW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952afea78516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/CasinoNav.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /CasinoNav.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 53660\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"d19c-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sv46dRhJ3JIes3m94xe7vBsxzhSiVRIGjmNpLieXLJuwlpvN6sTHnq%2FZgygsPAFB4mCRBrvvnXAyXXtDjz1SultbBdYfV4wRDCbL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b6fb76516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 282 x 120, 8-bit/color RGBA, non-interlaced","md5":"8d43f46f2a4b790984608ecc1104a8be","sha1":"a0a956287278748b50a0735893dc28589d36ee13","sha256":"3915f42fb4a3f851b3189cd6e61e33ebcd21ddf2c8be34ad224f2b4a2ed5f108","sha512":"f773e6fe662c899010c5a8f8a3b7d8ee6f86387c80ac4b1af4e1fbda1eb036846ca084157235d25b5cc2048842a219c661b6f056655299aff26ae1016cd3a799","ssdeep":"768:8LFlQO6exSyOeYaBlrS9MOXSLapAZuRMKVOCfanK17imEUsGdns1/L3FUrqasq/:8LECcyOTuZ8DyYRDgmEcn+VaH/","tlshash":"26331211a68b3e96eed11f9dbbe0ce9d0905cbc6f1d108128f8952171ab24bb2d701fc","first_seen":"2026-02-18T18:42:32.466126Z","last_seen":"2026-03-15T20:04:54.991719Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:02.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:04:01 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUawHtrFHywhH6VHkyChal8C1YnrQv%2BpCGj8XjLbzTSSxLYrGQ4Vx2%2BweJ4DBY9LPe2bAg48Mz5nnMx1cf39EqeriNZGyAgfP3Oc\"}]}\r\ncf-ray: 9d7953017d85516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9409,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e749ed22295b4704e1b6dd9c0e7604c8","sha1":"bb4f2de798b3731e68d5ab6fbdda601ade06e741","sha256":"db3104a409fc6b02833bbb7f1a746ad30503026eecc8f1bf7e1971143ec1bc38","sha512":"cf80af6ed29919f02044b8a596667615a6b243021dd8550d2c28f0685853302aeac19b511f1e40045ff33b5cb23e2c4877652341cb038f84b7abf758a261d748","ssdeep":"96:c7p/99CcJFriiI1VhymLXX5nuCnoQysSyRZzm/NC16VKrRbiRUypwiXMCo8JMNsD:WfkdliC5Gd","tlshash":"6d1205aa49122d8f47565ae07762236b64a00005af872e4ef8fddbcfa1f73ea4730145","first_seen":"2026-03-05T13:04:34.75544Z","last_seen":"2026-03-05T13:04:34.75544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T13:03:48.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c./logo_megafon.svg\u003e; rel=preload; as=\"image\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IjKGrKoFZp7AJ3sPjGgLNJB6fdvq0xirBrUlSoF5W1nZWqj6RNxwLRVPdYyVv5k5MFg7JVITjBR5ozub%2BURXD4IOjkSGob7NMEcS\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d7952a6dc55a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":61633,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29994)","md5":"1393e200e436b6700dd9a66407ded44b","sha1":"c8b75f716d4aad7f5137e5891f58273ade575382","sha256":"380834da0e95169cdfa91e01339787c823ad0e82261925789929d2b4384150f1","sha512":"526095cba9a30da1f038d37312741728b4db0482747415268b8f8573fd974d16ddb654ddfa4ca0c56d3d22ceb51c337b1ced4fbe1c491dcf6401e9b57154d728","ssdeep":"768:0EECC1zQOkR3iglB6oEKB97XOLoEKBSXObj/HNcVDDYRghB0QjV72BJiPK:D/lBOKnTCKYIHN+DDYQ5W","tlshash":"d153f85ba447d916a81bef9812bf2f2950cda477c961cd3cb39dca48078147e07eaec4","first_seen":"2026-03-05T13:04:34.827604Z","last_seen":"2026-03-05T13:35:40.32538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":83,"dns":55,"connect":8,"send":0,"wait":73,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0a025385f8c32600.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/0a025385f8c32600.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"1fa5d-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BBCeVP0U3V0VeCSaL%2FcQELMWeI0R1tClvIw49fsWsR5qaOu292fBCriTBJE4T6cNzPQ0g6B%2BQ8TfLB1HyfXCl5snJXMHM3ONA%2Bv\"}]}\r\ncf-ray: 9d7952a848b6516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129629,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cf2a6a677fe0fe09b3cc8c9802dc5063","sha1":"d68fc4edb62e6cf71cbff05cb2e008e2fe7c75c1","sha256":"67990029f658d8ce7526193cce865579f3328e1381d808ef80764b649dcfc410","sha512":"b868a651cc099729129e94cf8032bf4b5afcb079a1179f30ef2630a31efbfa5a20f00dc5adfcebaf081967f489236c5bae7c0ddf5e7923116b21db1d7ef26f8f","ssdeep":"3072:7Q4B56hAF7fkpRObf0R9LekLOZv8hrkegp2G4XhE6c3x2qpiOWMlxoMlparDOm0u:s4OhAF7fkpRObf0R9LekLOZv8hrkegp8","tlshash":"12c396a15327953fbc2ba0f192b8bc8c712bb291ef2617d8fd11612267c1af41d36724","first_seen":"2026-03-04T16:26:32.937902Z","last_seen":"2026-03-05T13:41:16.400384Z","times_seen":13,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_2.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_2.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"36359c9c9f2269f52a64b887941117ad\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FBF5AD1E\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2I0a9FuW7rQHFWVQ%2BOIh0Qo6Dg%2FM%2BQ8jby3Z5oaQOFvbcgmpHMqT6jHaC5JPFUndCUQXjC6ML8O%2B12ycAgA3DiHFd4FywyYUHxZ4\"}]}\r\ncf-ray: 9d7952b88bbb516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36359c9c9f2269f52a64b887941117ad","sha1":"2be94638fa3f8baff4a58b97e41d745c7dafbde7","sha256":"6153a48cacf5eb486258473e5f7a1ff7f38f4f814dc5f9e4625a1eaef5cd4f26","sha512":"cf44d52a2ea099b8f5c7ad9f027fdc4d6b632e6cc0b233239425e66b27a2f25102c3b1d291c1a8eb9991ef7541bf0a7084d691e31b5edd9e2b18ffb1baaad6c9","ssdeep":"","tlshash":"cb2102f892cda3e4c949c7f0952bb872791b31fa6e04c249b2f5dd80b3155bd885cd80","first_seen":"2026-02-18T18:42:32.488621Z","last_seen":"2026-05-28T13:56:00.787314Z","times_seen":16,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/pub_bets_by_domain","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:00.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/pub_bets_by_domain HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:01 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:04:00 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKAbq7CA02bIIlSrMuq2MOQGFFSUeTkOpT4n68OUUw0K2nTvdHuil4Z0aINF9Tcy1CPgYPktBm%2BaaAgemLSOKwX3I33MJ6qcyyr2\"}]}\r\ncf-ray: 9d7952f59bf5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66752,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa81e468bb82b5f4bfedeed97341c34d","sha1":"2d63d483f48c3b011550fbb7dfc63e010c23425e","sha256":"23be039862dad915a4ebcd0907038acc468dee1a8d7153f01cd0a54dcfe97931","sha512":"49b992fe1bf15d8f10ff99370f88fdf31a686ffb110564708bd2345d58825151274e21d763dccf4874884f09510aebca6603cb57b6618a5bb9f5ebb5d6181846","ssdeep":"1536:1uzMvqzHASk2thvUrw1ScrUeik9o8ohK87UiIzCsAioOdlyDj4:ZYE2","tlshash":"e263ef2915234ce84fe257c4bd827a0925ec0407ecfeae45d5feaf09d1ecdaa9335909","first_seen":"2026-03-05T13:04:34.808695Z","last_seen":"2026-03-05T13:04:34.808695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f2afc885ae0a6bf9.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/f2afc885ae0a6bf9.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"13eb-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKRC9HzlJvYskzX9fHFJ2wbQvK9PT3KckjmrOpBzribBzaIIxj%2B%2FFPhfAKQvIAqvgIEIDFDMVkWoqUgaPgaHHSX3dHe8MlyZd%2BqT\"}]}\r\ncf-ray: 9d7952a848ba516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5099,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5098)","md5":"646cc2326325a7d74b6199449eef2e41","sha1":"ad05af4a1c854ca3055e0ae8516af1a67730cd73","sha256":"cdf99da0fa8660b006e81a64c934023a4f12d74170afe7d22d7663abbe284f4e","sha512":"08018899bfbfa938b07fae1eb3983252762f3ab28dcfda61945d887f6ace4cc6b7caabb21c5dbb87e285d82a208581b7a5fd40814ff1c578926bf3e6dae0b82b","ssdeep":"96:artwd5qWfR6s8VJkUa5elmHDUzyXQFuQYfI2eNMlP9DcphXEbk2k+sfTUVh:artwdEW56s8VqUa5elmHDUzyXQFuQYfF","tlshash":"b1b11c060bd90d1b264a4a52e4ee1a50c9ccdeb754d1cece170e10e61e9227d23bdbee","first_seen":"2026-01-13T13:58:34.526571Z","last_seen":"2026-06-10T03:58:03.987231Z","times_seen":228,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/b4b8052d07fbc6ba.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/b4b8052d07fbc6ba.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"da296-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEd05Hg%2FO7JAFxCKws8lwyXyz5rGyxkorxOcikHzcjAK1d%2F8tTC5N33XIjoIYy5AsDbEtNofyNKzE7OsBY1%2Fg3O7bjDiEkWovypu\"}]}\r\ncf-ray: 9d7952a868da516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893590,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"414b6789dce4bb30ff5e3473c64cabef","sha1":"91dcac40e2ddd719e9d181b812577c417b37baf6","sha256":"4764b38173afc00324923a1323e470621c9cb4d5aaf0670f2b499354cf9c91a4","sha512":"b6aa2f1157e3e81f30df221c4e9f1e12fc02103b05168fd8dfd83bc3a8b0e2428dba6eb116c4fe158ef98a55c271af3ab3bafe3ed35f0846267c24968ff54b05","ssdeep":"12288:z1CEUPlcmCAzCY/gAgPDXON5v+is6kvt2KINQBWSKjF7EA51NuzygKGXhSyYfju0:7H2byQFoa9Ggy6ju3mZ/8s0J47GE","tlshash":"1f15d0b41f996ffcab209ba8c5ce18e92d1d03db9241c4dcda5e6ea0937205c5ccdda1","first_seen":"2026-02-01T14:00:57.525197Z","last_seen":"2026-03-15T20:04:55.13583Z","times_seen":96,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fvolleyball.png\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fvolleyball.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9504\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: oJjnzoedeAqH1PphF1SoU5bu9R4oolVOszc8w1dZxEY\r\ncontent-disposition: attachment; filename=\"volleyball.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MPe6A7pO3J3Qpk7E4LIuAfExkuGslsIncgUQ0y%2BMLAbzGTVVFCepmULQeztpjEd%2Fdiqvf7oJy4krFAHJj9V92D32a0wVv7nkh3yA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfad02516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9504,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4519ead58daaa72f1bdfe43c592bdb24","sha1":"53b225052b8fe2e348c5babfcb73964c37a2897f","sha256":"a098e7ce879d780a87d4fa611754a85396eef51e28a2554eb3373cc35759c446","sha512":"80434afb76e489b78a74c07690a4d842793e80a16f0c8cdf13ba8b81c128fce48e531527bb349bceae726a25c40545e902433c270445c202f89bcf045c51183b","ssdeep":"192:rGDxowkunCrRl+FcNqzBWJwIIZn8xpqtW/Gsio0n0Hc035ZLs79Q2inMebt6jn7a:r8ohAm+FcNqzgCIIOLqtWuz0LpZLW22y","tlshash":"c612af810f50590bfb540abd5a1a46373201a1f1a797c9ff23427e70b6ffea680d6c62","first_seen":"2026-01-13T13:58:34.470344Z","last_seen":"2026-05-28T13:56:00.620387Z","times_seen":209,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/icon.svg?icon.6a5f09d1.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /icon.svg?icon.6a5f09d1.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 05 Mar 2026 13:03:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09ij%2BAfwn083bsl78YL0HhPUS%2FpJC46UBT8TL6t%2BY%2FoO1F%2BlZFkgAL3PHNa0IuQmyVfUlxy21hqvDv9J9E%2FCZjFvDf18yyGInRia\"}]}\r\ncf-ray: 9d7952af9a67516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d463307224bbf1e821b1a38b65fa0269","sha1":"98c13ae050591c19768fc5dd32a6fbc9038e3cd1","sha256":"5163f65b0d9b8b660d5fef6aafceb1c6264cbfed84b637da9e78e86a3a9a6910","sha512":"a9116506d381fa3eb52f4446408b1e4fb8ce00dc004bf58b29c96ec41dcb5eb57c31c5bfa3395e7455ab87ae53fcfae97950b98b5d946684cb4a839aafb0b740","ssdeep":"","tlshash":"647188fa53c8b6d0e507ebf0cd3614346a5b28febf55c28549aaade9e53144d8c9cc80","first_seen":"2026-01-13T13:58:34.43113Z","last_seen":"2026-06-10T03:58:04.086991Z","times_seen":228,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/11015398626c7a13.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/11015398626c7a13.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"1afde-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yetJKEGSMeAn%2BM%2BEmfI5xesu89WLNPqZjzL23pS2n%2FHTNqIr2puiZ6YKEq61cQT9kj3E9%2FhCY9N4vTcIGa6M59A7RMHa7tIroXvk\"}]}\r\ncf-ray: 9d7952b12aaf516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64352)","md5":"b7f51f7958b0ad7b1bc73777b57a3a7d","sha1":"519e5b7857b8d029545e62fe4e82243b8f74fa7e","sha256":"240218fdd4292968f362c3099fd82ae117013642100f5090ed6d6910390b7b85","sha512":"0200ad238303787fa699c54ac2681a06e985ad0015775db2f01b2da0796036c36f86fa35d478b323c845c49214d013c60fb9e2bb5bb2f1d317a14afc2b9328b2","ssdeep":"1536:QJrGFCLLa3NkeP5sUtM+Lq4RV1JdOyLS14Z9wGIQE+rJiB7:QYnR9KbQY","tlshash":"60b33de0335475f4970742a5907f810cb12d79bcda0ac858f27c7ce92a349c57aa6fa7","first_seen":"2026-02-18T18:42:32.56362Z","last_seen":"2026-03-15T20:04:55.121562Z","times_seen":12,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/keno_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/keno_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 549278\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"c4c2acac3731e4553a58d09d1017d4e7\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A823C9C84C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFtvqGCk%2F2JTTmosV496WnABzKa6EULX00%2BAx%2BJVwEk7GI3kfqKdTFt9QG0IabceSkNKmXXcjhIX%2Fz5vMpLNlIJ8zlwRqu6OxuEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcbc6b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"c4c2acac3731e4553a58d09d1017d4e7","sha1":"c46eb7f7cdf2193c19168f9690ae8fdb93fcec97","sha256":"0dc462105b22d479cd304a011d65e16f54633f045357ec0b382bfc233c27a469","sha512":"fcb0d66222980a34ee140a4bfdb1e49b04bb9f38f72cf3b8e4d1389b722a654acec296d71f8b8ca13dc2f25cc8ab50b416aac846f721d5dfb352e0ced27f7326","ssdeep":"12288:wpAJKohPTvZvTXJEmM7r5pW3hdPV1az5pARzY4txYDRVMc2f:2vovZL5Zg3e9V1az5pmsVMh","tlshash":"26c4237782635b4f9e54f049eada9f297e527d4ce64204e89857ee4488cc0c37adce0a","first_seen":"2026-01-30T07:25:16.111153Z","last_seen":"2026-04-28T18:07:01.702129Z","times_seen":172,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e1042c89d2cd85f4.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/e1042c89d2cd85f4.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFxxm6E7nPw50Ul6c%2FcAwYTzuyawy7kO%2FbE%2Benfxa7h%2FqVWr477JjPbC62b%2Bu%2FdTFdbTQXaEM8Sn4hhh7M5P0p2ysENdCpxSnaQ%2B\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncontent-encoding: br\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"b7-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952af1a56516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"2ae144f1fd17ea24a3437c9e34f8e4fb","sha1":"833cfd723e5add0e7a3e97851942b5309a34c059","sha256":"22d7b075d6ae6d440287ae2f66d8da2613294d16c3ff8742c843300f520c4045","sha512":"b6cd4ff980a8143de7f539a165d1de7fc7a9c8726fb9875824644d72d1505d8ace2f5693265860b7f55ff6b1e339ed880bd2f0148701eaa496e172c5ca2112a6","ssdeep":"","tlshash":"abc0803548c1c4ac610525ccf5775765b46c2474d1dd1419d17e5e759165f2c594118c","first_seen":"2026-01-13T13:58:34.404211Z","last_seen":"2026-06-10T03:58:03.950454Z","times_seen":227,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/categories?limit=20","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/categories?limit=20 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gx7KYqtteky97uUUo2yx5QWgLtEqzcGWDOtZi%2BCXFUehwbZlnrPprgrlESyH2o%2BGv%2FGFo%2FgglY0yu8rm9G38TrVN10SYOfmek4Pu\"}]}\r\ncf-ray: 9d7952b74b7d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a669f6cc33d0d2335fc2450dcbd4d6fe","sha1":"7ab97b3dcc99d4ba755b7bd6a76e0bf8615db541","sha256":"bd0ebc2180cbcbb611e2108669a42e7b73b2465cf6ccd5dca17301e612046b6b","sha512":"018660e24d7a41e8748604201e4fe88aa77bfeecb08ab1074bae68990715f22eb07646bfc81a41b7305fac2ac3e1c143fde98ca333ab9e094b99e2ba26cd220c","ssdeep":"","tlshash":"c2d09ef930ca69fede952d00a59a3de9b4854823369d6f8244d48a80b2c7f9c301d115","first_seen":"2026-03-05T13:04:28.054826Z","last_seen":"2026-03-05T13:04:34.834679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/vip-club?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /vip-club?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hotflzW8nfe9oltqrCh9qweLuZBce0rQfiN5viw4dLKjGIM2ggnayx9V30queN5vu%2BKRc%2F0QYFeLzDVNqtH%2B2eq4VTe6Hi0gR%2B2J\"}]}\r\ncf-ray: 9d7952b7db99516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"225c49657814ec23424fa5c7168647d2","sha1":"2a4e637508327fecb3055d4cb13cad532bfa7ae9","sha256":"60de6aefc762234a46d2dbd9e9dbdd5816c4157c6ae213908030ce4dde83c6da","sha512":"268ade3054567cb611e2926e74b90e6a1b2aa9e36ef39f272fa40f7bad48a0298cc193adf6382af19a4d17b797d97ba10b3fb9c3f4691d6df4a194573ac4624f","ssdeep":"","tlshash":"d9e042232d0e15b31abf10f0452d99061996ce3b739819f1c0515d2f3f7632683cf685","first_seen":"2026-02-18T18:42:32.351657Z","last_seen":"2026-03-15T20:04:55.209612Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Ftennis.webp\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Ftennis.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 6969\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: Unc9D381pggOR8l5o84t2WdcUCW1E9V6rAizxYJcI14\r\ncontent-disposition: attachment; filename=\"tennis.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2jv5fuYONXjQmGTkR8DxcfllkIfPDc0uOEERXUxvGfPTMrX8RJRwqeKOmzUf5Rh50rY%2BBAEr7LWkw%2B00sHeZermb5ZKGcPrJfWj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfacfe516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6969,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3560d7f273cf3a6d44b9b346750d4d11","sha1":"8904efbe9e5f20f3bba06fa4fd05e5fd5e61c93a","sha256":"52773d0f7f35a6080e47c979a3ce2dd9675c5025b513d57aac08b3c5825c235e","sha512":"2fd58555d50cf80646231ef38e579f066a2e20606b3252ca7e7a3cbc0e47dc49ecef68373b0328ad75c78776c45cd6771b714e06bebd8fd20a87d2b8f7cc3b06","ssdeep":"192:rGXtsprlISr5a5H2wARiW++9AS1k/mOs0o:r6sbVr5aR2xghrx6","tlshash":"24e19f718321c8a3c80a11f149d922fb1669e98153b5dfafe525b753c93d2e30933a0b","first_seen":"2026-01-13T13:58:34.502859Z","last_seen":"2026-05-28T13:56:00.830515Z","times_seen":209,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/32e9bbe48d19ee5a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/32e9bbe48d19ee5a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"a4bc1-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCeJWlGKyHG9ma0kewJNLeycMAFfaAhS8f8IZHb2bMUjLi%2BA17bISGz77GScwBkosEGB2NkCCgJPu7l%2BT7%2Bmz3xlcskWsfbx3Is%2B\"}]}\r\ncf-ray: 9d7952a868d9516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674753,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54689edd9dfe6b8710a3cae385818081","sha1":"3d200e7d77537c36f1d3b26b972b94dd3e655c39","sha256":"1becb04d1ca44d058451cfed76e00c7a6e50936b5babd712c9fd3ebb94b78996","sha512":"33f7299897ac772ff8297b840836ddd7f9b9f2261d8098b358739737feda95ffe41affde5e4b84e6c532841cbe64ac1685fefa20173b87bf6ce434643d111455","ssdeep":"12288:oJ3yJkto8gLBoJn06HCzgZf92vvc2R85q+O:aIk5yBoHmAf92ncH5qz","tlshash":"47e423263fc5153eeea846bcf19e0e942b2c5a2c5454eb3510c22db05a9f940f63fe5e","first_seen":"2026-01-24T19:44:03.151704Z","last_seen":"2026-04-09T01:34:11.954673Z","times_seen":206,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/slots?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /slots?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3mxMxwYkJe30cRZag0vwnE6pMFeMktRHNWR3s2SV37%2Fg0%2ByjPmXPL3o7asFuRhkDSx0Um%2F4pnIKoDleyMROBDlKAmIm8SH1mWNZ\"}]}\r\ncf-ray: 9d7952c17d5b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"1e3b7ac66ccb082feaa3fbb096a5b11d","sha1":"6afaed5ee7e7f1bc6bc7ca1e83c4391f3bc35d30","sha256":"d84319ca3d390292b5915cca1d17f2839883147e188c5b28ef82722af9e55609","sha512":"40641b83652a65265e0893d505e4aad50f383d783a0f677a76ecb6524fdbfd3596190bb0118be2e7c6621d4bd1db130e07e49598d7a971089a9470c1b3501bd9","ssdeep":"","tlshash":"c151fe3f8701edde5796866500ebb24a664c473b57549c6a84dd4d08238a22f2f31ba1","first_seen":"2026-03-05T13:04:34.837953Z","last_seen":"2026-03-05T13:04:34.837953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:05.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:04:04 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJRtHNV9tgJeP567H3oQC%2BOB6QbQA2QCcH10J7Q%2BuoLA6JQ3eRCI0%2Fi5etx0k%2FTA13XoBKq745fn1Wmx%2F0bhZpPxxfdp2DalCEYJ\"}]}\r\ncf-ray: 9d79531448be516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9409,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e749ed22295b4704e1b6dd9c0e7604c8","sha1":"bb4f2de798b3731e68d5ab6fbdda601ade06e741","sha256":"db3104a409fc6b02833bbb7f1a746ad30503026eecc8f1bf7e1971143ec1bc38","sha512":"cf80af6ed29919f02044b8a596667615a6b243021dd8550d2c28f0685853302aeac19b511f1e40045ff33b5cb23e2c4877652341cb038f84b7abf758a261d748","ssdeep":"96:c7p/99CcJFriiI1VhymLXX5nuCnoQysSyRZzm/NC16VKrRbiRUypwiXMCo8JMNsD:WfkdliC5Gd","tlshash":"6d1205aa49122d8f47565ae07762236b64a00005af872e4ef8fddbcfa1f73ea4730145","first_seen":"2026-03-05T13:04:34.75544Z","last_seen":"2026-03-05T13:04:34.75544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/pub_bets_by_domain","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:07.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/pub_bets_by_domain HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:07 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:04:06 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0eslhrkWGnibiNLHLPOpKYSjhDsJoy7HANpCmgfYSSlmlC80uO5GNQbRS0ds7iRdivAXE%2BVyqOZti81Lt5X3YGO5G7SIzA64a5D\"}]}\r\ncf-ray: 9d79531f2abe516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67429,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e6d5716bb10c14f23d1b5e34a3868b00","sha1":"f55a0dd0821575a4e35c9c7b795bc6bce0fba7c4","sha256":"8bdc64f342a8d07d22c709d8a0cb1bef9a7c0012d2f9ee920cb801ad3312792b","sha512":"929cbd7ba05150c7f374004b079526578d8bb4a769f32f04c4fe60d91a9e23b2dc5577209a976f39b55e20cc84a456bf03d5cdfd3ec9b2edf60461da90c5fd83","ssdeep":"1536:8MvqzHASk2thvUrw1ScrUeik9o8ohK87UiIzCsAioOdlyDjRe5:/YEY","tlshash":"1a63ef2915234ce84fe257c4bd827a0925ec0407ecfeae45d5feaf09d1ecdaa9335909","first_seen":"2026-03-05T13:04:34.839329Z","last_seen":"2026-03-05T13:04:34.839329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/44a49465387680bf.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/44a49465387680bf.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"2639-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KT2YvUOe53tkL21gc4IwqlO%2F%2BUPcUyn%2FnZbJQh8X64%2Bwt3bDwMtph2pp%2BGLlwvKeTFVgA9OmKl45omuQA0TbVJ1tsMkiOGDfSyOc\"}]}\r\ncf-ray: 9d7952abc958516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (9733), with no line terminators","md5":"4b31a3c83f986a04ad80c7618ed0f42d","sha1":"cb43d9dd4b664637f8e7d34f8db097765fe2fe25","sha256":"c0aaea4c727db1b4550ab636e2b695863eabb46f341593d3bda8fa723dc2902b","sha512":"999432ead19eb74fbc858cb8cb94498335e2f8c63051182d005c501242c92b174adc660e07c6ceb9f8680781d82ebd9d8424802504e087d4aa30b39e0727ccc1","ssdeep":"192:zvnaPno9CUmhVMgDYKWyqrmAs5ZvZjkVDaXgm0WBFpoNv:zPACCUAMfrmAGj5NBFU","tlshash":"5412a50b471932790ac602857e9723f2773d684d72f5d1a09c8e461c23da67aa93ffd4","first_seen":"2026-02-01T14:00:57.558496Z","last_seen":"2026-04-09T01:34:11.861683Z","times_seen":98,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/geo","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/geo HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5wyLDbU4JYrr%2BJOZ0ecFBoBt8bBWul7PU6injhMQ7mQMVkcgyH1T0FYiYqRoLIIifZdkDTqz%2FTdRkoKkpYLqrIrbSPMZMZiCayL\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:48 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952afea74516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"542122b04fda568516d89e55d6c36120","sha1":"6e28c2bcce9430899f90cd4cb8c54459918e2c0f","sha256":"d77a18a735b5cef136d19ac34ff02534a18bc96127e2d665d886ddbf47cdb323","sha512":"f2532b01e1668c855c3b0430338061bcf8adf13b67968335bf1abefe17f3ce3ffe3fecd97452de655a18aa1de27103f84f84db53b332b7e05d0fe5f5f895d3d1","ssdeep":"","tlshash":"6b60000000000c0c00c000c003c0030300033c33f333300cc0f0000030ff0000000000","first_seen":"2025-04-23T11:56:57.670009Z","last_seen":"2026-06-23T20:43:15.279917Z","times_seen":244,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/notifications","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/notifications HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkHKoj%2BcqH0M5bVT%2BJNgFPKLzRqXSb0GAE5RnpGLNLxsVISjaC8TUgIuYsCF6MwamCJgwY%2FoOQh9SM9aiAGCAN%2FfGXTIlzvUu39D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b73b7b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1e7-1f1ec.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1e7-1f1ec.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0uyevbW0Xnnnc00T3DfK4zMv42dkAPFxECdLByUzoih9NLZJ%2FIeqaF%2FzCW4Sekk3GfyidzvfHIb0nZZTFvfuXY%2B4V4%2BASag5xGQkQSsOjJc\"}]}\r\nage: 1752\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-10c\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d71d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b7879f4b8000316eb26cbef996102bf","sha1":"9e2baa7c5ab08033a9e9528eac5323b412f3394a","sha256":"2adde90f972422244b44de94fcb784711e894667e19af16e032daf3fdf9ad5e5","sha512":"df3876111b2e488adcc223d415f2b24cde5a21edca4faedc922cd4050414e122fd255060f3cbc1ac35bc82162adc68e54c058b87ae88267ab34610841661293c","ssdeep":"","tlshash":"64d05bdc616ae8c45c16c7a43e6d36c1644a126d224414ebf047572896ce3df7b40b50","first_seen":"2023-05-21T19:26:39Z","last_seen":"2026-06-26T22:28:12.883824Z","times_seen":422,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":52,"dns":6,"connect":10,"send":0,"wait":15,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/original-games?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /original-games?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBbW4%2FUIqCtZn2WivIFDuqWJX8A6LFvj11hEmIkQ%2BDYIfgMZF0fDxd6gJbBxzJPGOB%2F1kruEvsPadhswOjHYHfAY%2BujMiKlGX6%2Fz\"}]}\r\ncf-ray: 9d7952c04d1e516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (301)","md5":"7fa280a7157e4f889b7b9b8d304340de","sha1":"e8a05d64f6b61728aa2a0afd8e0050612575dd13","sha256":"a78a58d993a2a49a3e79f6e45bb3d8274e03608f5ea8aeec17e4e9f7842082d0","sha512":"c3a2010ea94d7de583d7bbee090cee739c61079738997c06ab1f834f7a8d478b4aedf2329f3c3b451f09331dd84413a025cd9df1023c5d551ae9407b491d3c3d","ssdeep":"","tlshash":"32e042231d0e19b31abf10f08a2d9a462996cd3b339959f0d0651d2f3f7632697cf689","first_seen":"2026-02-18T18:42:32.480033Z","last_seen":"2026-03-15T20:04:55.1507Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4c256775dea270da.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/4c256775dea270da.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"154-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7aJYGIB%2BpGmK2EwS0M8GAObwkdIzA7MAzYN7IqJEVy9FlFfbn%2BvESox9FMG48ZuOCu4pLVHJJ2kMtMFreFix9eTUPAvMUVZdhcz\"}]}\r\ncf-ray: 9d7952abc956516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"2ee70ea383424bd00eb0b2c1d6d17232","sha1":"244cbc3e2f69ae1446d4520081b68339937cc883","sha256":"b8646432b01557bb5af3c7a28b37ff02c2bc5750b9592b637a8d93609e9f613b","sha512":"1d0f4408c726bb456c7f5f4b721f7aaf42eb41e2ad989cb6691d8c8f41c88f686bccf1e964598a325cd7f5dc1a3dfdb2a4be4726582379f4265ccc4205fd1bdd","ssdeep":"","tlshash":"ece026134107e5dd0067534ce13633bb20382bb69b4e342b914d1594d17865464cbd7c","first_seen":"2026-01-13T13:58:34.468178Z","last_seen":"2026-06-10T03:58:03.871831Z","times_seen":227,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3af414076e40d6d2.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3af414076e40d6d2.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"3719-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdzGX9%2FtWCggfhEUn4TElD%2BymTMulRMhWkNKdhQl7L2%2FD0Wq3sgJjGgU0wfzz3nIr97LfvHwvjcMA0FA4ITG5Lset3AE0fsuPV8K\"}]}\r\ncf-ray: 9d7952abd95d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14105,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13973), with no line terminators","md5":"f552d8fad4c6e35e87fd003150efd19f","sha1":"277e39792dae7041e8d5e200f27cf10bdf0a9cb3","sha256":"1a04a86e0680d042931561c4a1d5007b0f57c8d52d4315e92e67afa0da7f2853","sha512":"00f73cccc0daa26b38a20dfaa1d2fb84eb26590254bef9fb7eabcb20a7eba519b5bdfa0882d0153b7257015a81626092efc58270b4f373f2ceb8a737a0e2c1da","ssdeep":"384:OBZVn7f9RurWFNhNS0bHygpWqP4VA8/cmmoBPjUHa/Uk7u8fnxDOnRXcPVnX:OTVn7VvFNhNXCA8/cmzBrUHackq8fnxV","tlshash":"48528403ba5c373e4a571363b9ef299537bcd12000b4e04555ba85288bbaea6c1f71ed","first_seen":"2026-02-12T20:36:03.490194Z","last_seen":"2026-06-10T03:58:04.103394Z","times_seen":56,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/03fbc1250bf4a7b6.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/03fbc1250bf4a7b6.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"131-19cb66cca88\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVks2%2F1a7lNNiuElfM5AKG09G5N6%2Bp8kcQIv4ZaolD0IohaMizomLPBwgE%2BRZF1NKTLr0Qf%2B2rQEtyZIVujZCucDP8TKX9Fzstle\"}]}\r\ncf-ray: 9d7952ac7979516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (305), with no line terminators","md5":"441f8c9d4b02e80a247aae360e3c00e5","sha1":"b9927e735deea0cefb878c0198ef58cfd561e589","sha256":"5509a68afac0dc2dc6e67611fcb9c06e539408c53a492b3afd0d9a4b9df5184c","sha512":"45bf68ebd3e1293fa540164ea17f88653a1b7bc2d20c3eb6acaf23f9948090c643984ebd69f7d428529900a4d75f746cc22ab344613d101cf25b28e7076beca6","ssdeep":"","tlshash":"cfe07d9a100784e809c77369b275468830bc20e8643f8032507d846c52b626c9289440","first_seen":"2026-01-13T13:58:34.410052Z","last_seen":"2026-04-09T01:34:11.876408Z","times_seen":212,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/domain/settings","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:48 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjP8m4%2FFfGleW7H%2F2no0%2Be3IOWM8RadpmxYFFmpvLd3U6ooDjulroeYvjbBVeZYBZqOwkni17Sg7%2FeS9CKqlqAwFiC04ifWNkaZs\"}]}\r\ncf-ray: 9d7952affa7b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"21b28798270caed16be16a8b1760fb21","sha1":"41a414fd2c7a043ada1fa014b8553c905dafc65c","sha256":"7c74caf79a14c6d1a39fa5f0ba512624b119c7fc1a5e5fa795c81888115addf5","sha512":"c9f7220fe44f2a45e53acbcad210c612fa0e9ca167184c64c8a68ebcf3aa80db6fd1234d0a598559b209874e97cd897bfd6f27347c04c6d00ee9c9dc9e772378","ssdeep":"","tlshash":"d7114e2e485439bac5c5e61adb1d3d074e3ed17762321d35b79cce3412fb0761628a27","first_seen":"2026-03-05T13:04:34.811754Z","last_seen":"2026-03-05T13:35:40.235613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_7.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_7.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"e8cc88d7291802bedb7d437bb6e8dfef\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FD0EF50C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIW1I5wVFP20Jxc5TP2ybsPNQvLcaVltBZrLIxyyBZF9YfMBXReLBJLpaAjmrZKoQ4jqdT1DoJsoI97agVwDcO8%2B%2BnIb%2FN3V3LAR\"}]}\r\ncf-ray: 9d7952b8abc4516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8cc88d7291802bedb7d437bb6e8dfef","sha1":"52d59becc78dcbc2fd5b70a45c8ea41e9ad517a1","sha256":"f203da31a6e87393a784e40a6ad4ebd423a121a1f9309cf43bc1281949f6761b","sha512":"ada6c4c3391efb9e9e1202460a334ed34938ce2bf9ce7073bb9baba476a4831cbdc95f0508f1c8e22ae0a429aabc3be0233c842b70c085c1efbd18c66c4cb988","ssdeep":"","tlshash":"46318bf2456c60e6ee8c5fa57225dc77120f3c7a3fa8c08cd9209984b75255ee81ef04","first_seen":"2026-02-18T18:42:32.428696Z","last_seen":"2026-05-28T13:56:00.773205Z","times_seen":16,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_1.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_1.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"caa2253f657c946026986b0c4faf66eb\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FBF6335A\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17766\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mu0Lj4R3JqnoQar9Z%2FdfO%2ByrErNvre2L0oYTzfihuyInPmokPZ3ZYkfuQJXCs3HRtHlaJ23phdqY6dlwra16s9jWCo5v67SJiY50\"}]}\r\ncf-ray: 9d7952b9cbe8516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"caa2253f657c946026986b0c4faf66eb","sha1":"7af83996755910b0473f044d470d5156db636d11","sha256":"ac924842ca2ac124a77620bf8bfaeb55c9daf57c86a0b2b83849a366219d314c","sha512":"0d4f6f18016efa2ab92f53175606b6a9aae567c33cae8014eacbe0b7a35cc22e6995c9aa8a75f860e8d02dcd0adb6124a27fe1c915ad267be8f9e84ead314208","ssdeep":"","tlshash":"be31f0e6a3d4fbd0c247d7b5ec17949ab46f24babe6f13c816e0aa5831100dd1509ed8","first_seen":"2026-02-18T18:42:32.560752Z","last_seen":"2026-05-28T13:56:00.839217Z","times_seen":16,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/media?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /media?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMHnWNpX1AIPILndrFTC%2Fi%2B9FXPR%2BMoomoszouI7mLoW0%2B3fdcHjKPH7175lfE1YZzNIIECZ1VDrk1ffiLQHQyKaC6ngygqkFsoH\"}]}\r\ncf-ray: 9d7952bcdc78516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"80ee1d0fa53b63975872f00a82933da9","sha1":"e1e800aa4725b0bc9353dbf3ff8162c430e8c241","sha256":"2d61825ac5aee5e523f0bed594b7f9134fe73104950b312c8b80563c7b1ba0ff","sha512":"bfe7415ce180ac6d45f472d8ee884dacaed38049a739d135001370ef319652741c6f0768238152956e4ca8d5b46508cd57914e5346574f3a202cdce6c948f2dd","ssdeep":"","tlshash":"2be042235d0e15b31abf10f0862d9a062a85ce3b339855f0c0511d2f3f7632a93cf685","first_seen":"2026-02-18T18:42:32.548031Z","last_seen":"2026-03-15T20:04:55.075829Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/my-bets?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /my-bets?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIKEtcia1nEAWAMSiSgC8pkb7g6Ri3CCK9evUUcPGe0zrf3vcIhfN8vkiSfp%2B%2Fo47FC3x38zIAchjwCLO1KP3Jfoag0tJo7x%2BXYj\"}]}\r\ncf-ray: 9d7952c1cd6b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"92345e36654aa03586c27c7bd18718f4","sha1":"36738b2eaa443a63c7e960c38f08a5d0aa5e82f1","sha256":"1d6e900416f26870f45a4b7190a448f23d663d9b883bd049a01c52b2dac8d3a5","sha512":"aecfabcff15281a9437bfe5a7aa88b06919db247093129e0a3c89434a3990e9eb4ceb48ff9b82e15ca23dad256c1b8bb83aa9a332716c1a2eeebb63ee34a20ad","ssdeep":"","tlshash":"fc511f3f8710edde5bd6866900ebb24a664c473b4754ac66c4ed4d0c238a22f1f71ba1","first_seen":"2026-03-05T13:04:34.847504Z","last_seen":"2026-03-05T13:04:34.847504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3a6b01cfeb015c57.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3a6b01cfeb015c57.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"5f6a-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFglGB%2FAF64pVDtBUpAPyXnASoGJCif%2BrIUWsCDw7YWzy1siSGhg7idZ394KthP%2FHv1S8sXMRkosOu6mFMeHkr4XaTzevF%2FmsLAm\"}]}\r\ncf-ray: 9d7952a858c7516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24426,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24426), with no line terminators","md5":"849d648c329865aa5ed3f1e2c14d059c","sha1":"880d8199047079dfaf661f6acec42a9637f7c6da","sha256":"1b00d35ff042cf7523b58bd3c8cbe2f2a281d72d340cc0733de0c702582b8ea6","sha512":"36dcd98a083317d0b14f908143dda335a9c93fbdd9bf73ef43245dffab6f719a6abddced0a10eb156cae1b4b1a9e52f9da309873cbdb2cdf30e5aebba284bfa9","ssdeep":"384:cJsgw7D8RoKa9otOelHwd9OcrqkYPE4cZUWu67YrNg76Y9K:cJkDKtOelHwd9OBM4cqp672KHK","tlshash":"81b2f9ccb193b0201663925650bf510bb1bd2d5ca58ec058f576d4ee2ab798d6333fb8","first_seen":"2026-01-13T13:58:34.519367Z","last_seen":"2026-06-10T03:58:03.92801Z","times_seen":228,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/199ceb4a5fb4be0d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/199ceb4a5fb4be0d.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"125a0-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UsclV8BdstJXUJn4AmA0K2B9FNg5ait75QJw%2FcH5VQ0JVAaTOvbHF6hoUTrJpYxu%2F4lMiUHqpYPxgjiZ2MHmM30fP7vjMiNfwvSO\"}]}\r\ncf-ray: 9d7952a868d7516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24324)","md5":"78cd840e95725cc1f44ecd94b513516c","sha1":"7a80b0c0d4f14fefcbde681e11464c993f6c1815","sha256":"d3d1cc68154d15344be67f704256285c447c1277fbe13a69f4559e5795001915","sha512":"ae33f4d1693d42e4c02294ebaa252fa8e54bbf96592ce3aa3c4d9c0caed3ddf2ea9632e8423aa6f911fa33e2460e84fde9f457ab681053a26558192faa2fd8d0","ssdeep":"1536:OQe9fxkVtS4sMFKudBi6Wjvnvj1CJXuSzHDfp:q2BiVrnvjaDx","tlshash":"f7731c7061646ef4b61f41b8f06ec54c341d7eacda6a9a54f3b87c2a5b048c03e96f87","first_seen":"2026-03-04T16:26:32.912621Z","last_seen":"2026-03-15T20:04:55.101689Z","times_seen":16,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ad6b1ddcec4cb5a8.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/ad6b1ddcec4cb5a8.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"1507-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJifeFAfGp82DW8Otf7w0Rv5rkilcZO6xdIbLMVgU04gY4EnMlUyUk58zj6mX7b03lmp8SUeonbAlpvqbiFZrpC%2FveuWvAeMkSgb\"}]}\r\ncf-ray: 9d7952abb952516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5383,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (5367), with no line terminators","md5":"ca8f72b0dff0b15a2220eb717b98488b","sha1":"2bc25662a117a508adce9ff8df2e544624819aa6","sha256":"fa54491e1ebe956f011cca158d6b94328f6596e9f3373dc942dda8a3122679bd","sha512":"db4646dc6dadb068f9f74ee85ce47beec97e71cbc1c97f5ab36dee3c9b08ebeb652f4d710ed1407dd37f0f9156957a0b7674cd520d1625d58686191f3511015f","ssdeep":"96:At273n7i7i7HSK7ViTiEkMxzO2k+NepInmPKI+j2w1Ux4gxaPDvo04n+MLSObghu:PLWWLSK7VWVxg+nqR4g4bvt4+Muh58","tlshash":"37b1c9179364319a0bf70268a19b39d5ab390c16b301c884dc59422c73ee5fdc77afaa","first_seen":"2026-02-12T20:36:03.607191Z","last_seen":"2026-04-09T01:34:11.878899Z","times_seen":41,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/aee865646d5860e1.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/aee865646d5860e1.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVkSfwLAnDWJdHriErxBui1FQKEr993hOUDT7E5y8CCBPqbC7xqxY92b%2FS3%2B%2B%2FLCPHLWIOQeme663eAa9UTg0ReuQS3noXBZzd0W\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncontent-encoding: br\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"e4-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952ae69dc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"219ef309b5647971e066190aae0f3412","sha1":"bef77b2f601015a52c9e4848817f0cf7c1df2ad3","sha256":"e3badaea9d2c9c08613a447a709aa55ed1d67d579989a8f59a21b1185967ca56","sha512":"a47993aacd8833eb12e01231e30e05957b7a49ee93b46546c254243b9e822dd3aa5130a8455d1a2b47e1b333faab29efabf91da4488da132ed3b3d99272d0f29","ssdeep":"","tlshash":"9ad023150113ee0c100760cc703995557c29753211ccf009e05d09735238f6b7191274","first_seen":"2026-01-13T13:58:34.418244Z","last_seen":"2026-04-09T01:34:11.884277Z","times_seen":212,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_4.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_4.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"8d19f2a24b11f4751f946abd4099b363\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FC89751E\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpPxs7PK7UbexoDYsUpYKeABeADPgfabqEX6Nr0bHidspCNvQ8eI%2BD%2FuZYh7A5vv4HEFG4%2FwXvFgAIyqB1WuapH3DKT4VSqahKut\"}]}\r\ncf-ray: 9d7952b9cbeb516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":950,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d19f2a24b11f4751f946abd4099b363","sha1":"dd9d0129e9688ca52a687ef8cbc12dda64b944b1","sha256":"140541015159ab84ecb511468695d08ab64d81fa7f8b5f39daa1cfd5b88e09e0","sha512":"c5d12ea38a032c0e3b4ac17577e62a334d22ef852257977113627623765c581e7becec590c5fbd067740b9ed6f0535385870dc2f859b6f17d50142e5cd79e2ac","ssdeep":"","tlshash":"6d11bdf7a344e240e519dbf69a3a2fd136af24762f7ac3a051e27a94f62517d0d0cc04","first_seen":"2026-02-18T18:42:32.448102Z","last_seen":"2026-05-28T13:56:00.665854Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/limbo_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/limbo_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 552435\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"a9077f3ee03555f04558762ef58aa24f\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A82232025A\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soY0ZQN9g3IPDVhP7c1UFqsmgz4LTLFNHb2HmVlj%2FD%2FHvYpkZz3dcYiDrEp4%2Bxj05lRLe2lLN%2FdvEB4vuCYdrFYIiyOuFXf8hJJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcac69516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"a9077f3ee03555f04558762ef58aa24f","sha1":"4c94d43af5526f4616546fa01d0320e264f13d96","sha256":"ace15addfad66f8ba7b20ffffa60106bdbf641b52ab7192e90c0940509e064ff","sha512":"93d4df9b0d61bfdb7f9885d385e37803901156adaea0a4a82f97ec7ffe8282c4a322737dd09d273197b676fbb58c37aa21e6a00ee4567e028ea82b01de66cc73","ssdeep":"12288:mFmB6fJGrCPZRhJShKeszIpGQxDdJ3n0tNI37E7/bRbxaf00MwlTvAJd:M0EJzBXJlxzIpGQ7F0tN6Q/bRIf00MwI","tlshash":"41c423251857ae136242d3e23e7a4f600a7ca8973c3da170ad4e7a7419c73cecd5b92c","first_seen":"2026-02-12T20:36:03.61634Z","last_seen":"2026-04-28T18:07:01.826414Z","times_seen":36,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1ee-1f1f3.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1ee-1f1f3.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5b3ddMgaCGGBNGM6lG5FfMKsnWl6Eoo7K0KB8PnpRXnj98tWUt3ltLgL3HSZuqv8sbuKkIQyx3j6SPqrKmbtqCcj3NMNeGSVs%2FtU1AbkpRh7\"}]}\r\nage: 6507\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-8fd\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be9d7fd9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2301,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0c892dde95804d59b20416b8db9fcbe","sha1":"41f09b07a8c26144aff93575ba4a07a0122bdae6","sha256":"aa82222076d0dd86dc6f37947faf10333212886549a33c4fcf6b44141b702018","sha512":"8eadf55e31f49edebffdb864eeec76900caf6f5163d2e3cf1988757271bb7c5e2c26c3986b4fe5b2f8953e733ea0c4bf4fb3cce0ec4d1010e20f5125abde3ac7","ssdeep":"","tlshash":"2e4165a9717df8cd9b01c6fda63bb9f1b00f50496b12d3a9b55b0f0a481a4fbb0056e0","first_seen":"2023-06-13T16:46:48Z","last_seen":"2026-06-27T03:44:47.203547Z","times_seen":10221,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":51,"dns":1,"connect":9,"send":0,"wait":17,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/pub_bets_by_domain","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:04.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/pub_bets_by_domain HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:04:03 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYz6ik9wTJeyApuyWcG6qu6oiLQ49OApRVRD1gNnlub1Gra1sCkkC%2Bacyk%2F%2F5uUcP76XQ1GDjPOcP1brvxixOy8XZ1J%2BjR5vLqaW\"}]}\r\ncf-ray: 9d79530a8f03516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67340,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5cf284a5cc24c86f2f66529212756d5","sha1":"dc61d84eb97305738f0953d4bc1066acaa891098","sha256":"84d6eca9559ac78311485a6f2f5db5bfd450f92c086582e1b493df0f89d6b7f8","sha512":"69c4093230ae48dbde1f177607a35507b413dbb607b9d4fa33b15fb3a1ba7143bf077aae7503f3c7fba87c975ee2191b137ceef1040315b4433318db1b1877b3","ssdeep":"1536:WzMvqzHASk2thvUrw1ScrUeik9o8ohK87UiIzCsAioOdlyDjR3:XYET","tlshash":"9c63ef2915234ce84fe257c4bd827a0925ec0407ecfeae45d5feaf09d1ecdaa9335909","first_seen":"2026-03-05T13:04:34.853829Z","last_seen":"2026-03-05T13:04:34.853829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/02aa6b5741d4442b.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/02aa6b5741d4442b.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"604-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsBfv0pv3cLFtsMV57X2xgqHKstyRDFIwjgdeEtgHzXE%2ByUECMSf7bFnX3cn6CK9vJVTzik%2FlgopIPoVeoebZdzs%2BGDKxO6ADwJV\"}]}\r\ncf-ray: 9d7952a858bc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1540,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1539)","md5":"f6dbe291f37644afecb063b65b9ba0e9","sha1":"da9a4f08a2bcde5fcc88b6cc4457ba76aa353b5e","sha256":"51759781672a558c143715b20c2139413276ee9451e9c41b79a39f116f298da8","sha512":"0c12ae1fae0afa080da014a805057ea0e0cebef872d35b31182c3280a7e6d75325d3bcdded867040d9cac64f95a36e82c14a94bb4cb0ce322d92599e3fc88f33","ssdeep":"","tlshash":"fa31df20bddc216d982f9122add6ae4d023bf051fd374a5d5d7ce6584ec249420bf7c2","first_seen":"2025-12-25T06:49:05.266983Z","last_seen":"2026-06-23T14:45:03.546395Z","times_seen":1593,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/profile?_rsc=1r34m","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /profile?_rsc=1r34m HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zCkHAPazGRMRKV5Ypp%2F%2B8n9baQkbQPZT12lO1mUNMzAGz2%2BTl0GJ6GuRPrRtRStU3cTDmkmKWI0Xi8kxb074RBrTxcBlj5pPlHa\"}]}\r\ncf-ray: 9d7952ac7976516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"0b9a8ea26f883118470ab45d385fab4d","sha1":"d69b6b71f4ce1a66c7375173955a94eff83b488f","sha256":"cc4567ad2f62a4b7de6e817a29668b71a18da66ddb92076caa8342b95f1bd9fd","sha512":"8def934938c160fd429318d88c5f9057c9b0a895807678fd3c72e36d559481efb6a88ce1ade9a6ee35df63333d6c304e43bea7aadc7df4caf1ce86f8c71cbf77","ssdeep":"","tlshash":"c9e042235d4e15b31abf20f1852d9a062985cd3b339955f0c0511d2f3f7632a93cf685","first_seen":"2026-02-12T20:36:03.58846Z","last_seen":"2026-04-09T01:34:11.880233Z","times_seen":40,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/SportsNav.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /SportsNav.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 41860\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"a384-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHRGbtpuYVxKueAJrcZoH2I05s7gGEL6FhpokLycvjWVMBxJPW%2FhFGCX0HQkmaiLpy%2Fm8hDr3lx%2BALVjN9KHStGBlcWevf6Hhv4N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b6fb75516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 283 x 120, 8-bit/color RGBA, non-interlaced","md5":"6493a338a5879ef75288dee521a30511","sha1":"35358b9b5a143bba249ca4ee7a86df8d80273c7c","sha256":"9a11335b19a28034a35d438152a4ee9b282dfb4a4c0a360a00facd3791b9506b","sha512":"040e08a0d8b64b05bd939f845fb8138eef040de1b19ce918f2c9c2e34655e0ed3331c48383481e746b5758adfd77664625e2e40ce6b5269ad42845ffb7c67188","ssdeep":"768:PlB6DywExta75K3utZNrbP833qyAwfjL7JShuXyzwK0g9BTO40:PlBeeSfdbP833qVwfjL7J3AwV9","tlshash":"a913e138b36a46e49fc4031ebb1f0d1c12566b85171b05ff61f2e977ef9d82e2124992","first_seen":"2026-02-18T18:42:32.375058Z","last_seen":"2026-03-15T20:04:55.079502Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/vs20starlightx.webp","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/vs20starlightx.webp HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 227643\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"bb5295532398103c41ce1eae6b2a22dc\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A8235D0B90\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sszW636orOXJQLTxUhfJ6tIPjEtX9jedHOW8nRrsuC6skpGE%2FEL%2Bo%2B1ttE8QTV27iZmEIThzqUaChWnP35%2Fs9EqLR%2F2kCCy8NZqR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcac64516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227643,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 360 x 472, 8-bit/color RGB, non-interlaced","md5":"bb5295532398103c41ce1eae6b2a22dc","sha1":"02825335ffcad049f49a71c837ba6026ebb0222e","sha256":"ef12cbcf50cc01f34ac91530bfa098e7105fa9688aaad27de58558c43a3f1b80","sha512":"2079e83330dfa8b95c05da0eaa7f35ca340344a929817e68f87ec726b4d1cdd0139d8fb9e11de573bbd88484842b55098bc08d847e8254647e9cdb9d840aeb4c","ssdeep":"6144:1bUZPxQ+4VPVod6s84l5zZJTUIZQkrq6OqZHn3MoYHoPltOt:1bUBrzr84l5zZJvrq0VoIPlgt","tlshash":"3324134c683208afd86b4775c2c8fe05e0d34fc6bdfcd033b926be546ac95695e12496","first_seen":"2026-02-16T16:09:44.850548Z","last_seen":"2026-03-15T20:04:54.990973Z","times_seen":20,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/dice_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/dice_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 555203\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"eac4cd3574513dd0b23cf558f1cbd109\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A823EBE713\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1QBg7uvxM8tkBu1h4WMp00KBwJdjnI4UPFqBEQWNPd7WHZ5YTcYW7yjjCEFM9v9WRyRdibwKpZS0G26B2bviM3YsmBd%2BIOPHpWi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcbc6c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":555203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"eac4cd3574513dd0b23cf558f1cbd109","sha1":"a7512136593b61b5c1df200d7239d07a98ec00e7","sha256":"5716c6750158d15045b25e6694b3b90a35bc04ebba60bdb219a8d4574da3cc51","sha512":"f68ff3f346c7729eec49444cadf1183902ef703c1a4718f18fdc69b831712adced1500bb8bef617d170b67f556c2a427b36af2199bd1ee167d7038d3e1dab9c2","ssdeep":"12288:l84WszFSo0sqYVw/P+40o1SyUNDw/QSQwtDmWrUPHM:lLhZSkqPz1S3M/QVuaWrUPHM","tlshash":"55c423ca24884af3fb0604fe5f1df513573a2562352ee2898c6182df65b2e0eacd54b5","first_seen":"2026-02-01T14:00:57.575018Z","last_seen":"2026-04-28T18:07:01.713267Z","times_seen":89,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4542b55ff482d5ab.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/4542b55ff482d5ab.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"251-19cb66cca88\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2u8r5c5TFMi6kT9B9KuPYhpMFtz0%2BVPFMsyMeG8jW1vZDbUMaO4PwD%2FRBfe2VnMvZ0FYW6ln2fe2misa9ag1V3muAa%2FyzsTeR5zd\"}]}\r\ncf-ray: 9d7952ad699d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (585), with no line terminators","md5":"279532cfbd7810bb6138fb2eaf4e369e","sha1":"6cc9d9affca5e9cf4677154927fef8c86e575968","sha256":"a789cacd4f859dd5a8dacaca7c22df87206b09af2821359a5c74d66474214653","sha512":"51681adb81e93f4e4e12491b18cabad8239187591ffe053637e277897585ac0f07703f59d261d59c6fd5a79e4a367f8677a8e2cd27d55c66d6dd976714d2ee0f","ssdeep":"","tlshash":"43f08badd210aa2d6a47d1acb2bf9765a6b411a3504d1c03ad8fcda443307dea9340cc","first_seen":"2026-01-13T13:58:34.423074Z","last_seen":"2026-04-09T01:34:11.917205Z","times_seen":212,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/20fc3cebcca07a0f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/20fc3cebcca07a0f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"7d11-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3iyudeDXNZ%2BFCOvykGiAenRj00bAnxPx%2Bu9RxN4HqLrU0j0YTkDiQto2PXBNRYbE4oXXr3yJQfT7oFiCzwtAFEtKEnQVlA%2BlFM%2F\"}]}\r\ncf-ray: 9d7952b24ace516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32017,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32009), with no line terminators","md5":"7fd180cf72e774d113a37f469f1b13f4","sha1":"ac8d3e2f0c06540fc18fc98e229af863d6209b2b","sha256":"5c11ab40ef3aa48c6e96a6eda4cecd23556e87ffff1e9010308ddb12c70f1252","sha512":"f67e49f324ecc6a55cbf798a5b097a945bd843622cbfde7bf6ca58046033c27bae8668fbc8c134fd95d93759ea7da115c9c70043c06ab0dfe98314be56b6066a","ssdeep":"768:hbEe+KZaqYIv59w7varlkGYgOvJQj3KlDo6mlZsZiISnD3djM:3+KZae5aallYgOvJQj3CDo6mlZsZiISa","tlshash":"82e219ab3111f47246ff51aac02f1b097238119e570c84ac793daeed26b0e656397f39","first_seen":"2026-03-04T16:26:32.834645Z","last_seen":"2026-03-15T20:04:55.107387Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_6.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_6.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"066aaa75ffec28dae22b8cd3f7b0efcc\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FD06E248\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2HigmNIkvIrWqKkOK%2BJ1mAdy%2FPM9LNdjP4Rx4FQoVYMY8myygMWCf30M8T6wUkYLRyJv454aM5zjVn1ijvv6zTCnvJq1BlyHrkr\"}]}\r\ncf-ray: 9d7952b89bc3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"066aaa75ffec28dae22b8cd3f7b0efcc","sha1":"4a2be5406152424f4734270ccb124b1b069d16a1","sha256":"20bcdc6ae32d4dc20cfbaa5439796970d9dc663c5a295e95219fd0df4ebdbbf9","sha512":"cb94a3625b0a38ea691760163f961b675561bdaa23c66080bfc0e08fd8839dce04812d1cd60ba49e2264eff0306e88e9c7e3653d992872fc4f82a757e5c7b702","ssdeep":"","tlshash":"a34133f7e2d4d6d0e941a7b0c9218199366f28ff3f69978502a0efd8f2210e8c94cc84","first_seen":"2026-02-18T18:42:32.554831Z","last_seen":"2026-05-28T13:56:00.688573Z","times_seen":16,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/recommended?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /recommended?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7tt%2F00zhxvBnwNi37vHlds7LCLw0y5M7qrcmbjhAtRqAsyVk9sVOemYaDLCRLGdkzSicXS7bqVS5Hpmv3UppbuUilBuFHVYQF2Y\"}]}\r\ncf-ray: 9d7952c03d17516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"c571d52ce547065e003d8b2fd98a4d9b","sha1":"e91df9a7da96cd89ee6c958a0158ac3c3660e442","sha256":"b28af03da12b9836b454e99f970d0807236121c1643b90f3c9a2bfe0f34bc278","sha512":"83da50c90a654e3361bff92da78597f9e8cacbaf1c6a2751c5428e6458ca23e6d868e80538fb098b86aad584be1235a46641a6bad74c14e167773785175c35f9","ssdeep":"","tlshash":"f2e0e2231c0e24b31abf10f0892d9a062985ce3b339814f0c0901d2f3f7232a83cf285","first_seen":"2026-02-18T18:42:32.404886Z","last_seen":"2026-03-15T20:04:55.122186Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/original-games?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /original-games?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPAXBCciE5DUQyxpjP0tdaQJ4Nq62qJPaSPJbQScLhK13Kwd%2FgKbt2WtORzfvQQhi%2BbseOwijGf5eDhvlIy4Sl%2BwTAG7aMEq9D0t\"}]}\r\ncf-ray: 9d7952c1bd66516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"c767ea1b7ba968f26938ef4d6289133a","sha1":"f861bbfc3ac17078909a4ae73a5eb3bc60a7435c","sha256":"065481affd4754a3be23d28365a1347d97407a82990d23ed944f28f43cfc96b7","sha512":"eebe94afd1d051950f45c293e43ac772181918ef611df505aa0ec1e301c3514326d0916329b247f3f19ae7315b9272f117559c7b530993018c43aaf7fabef85b","ssdeep":"","tlshash":"9251103f8710edde5bda466500ebb349664c473b97549c66c4dd4d0c238622f2f31ba1","first_seen":"2026-03-05T13:04:34.861882Z","last_seen":"2026-03-05T13:04:34.861882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0763e3794b994210.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/0763e3794b994210.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"11aa9-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIqBQMrdQAvWXaKgsrfN41ZUVKQ%2BaKLDXybUr7grjxlhGBsX%2BmTVlSIf81ARmCFFB08mqAZ1Q6tOCM75mks1Ho8WHcMCvU%2BQ5S%2B0\"}]}\r\ncf-ray: 9d7952b13ab8516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72361,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27188)","md5":"d3c4d4847343f6c24d2b991b2ecb1812","sha1":"e2161337d967fa10956072b1819bab01df94ac66","sha256":"d2c8380b27dd69f8e1381c5fba8dd65b17ca288f8111fd1f29031869d52c334a","sha512":"d6fab146dab6958bd87dac9cb57c9e3871f82e5da7b69aafc28820459f570f5cb42a79d876bc731403637bc22567eab7887063d21c6ffa11ba510906dc8ff62d","ssdeep":"1536:QXJpCuoWxmSznAYA6J2Apyobba01bytBKbaz:OpALknAK8OEtIez","tlshash":"a0632a647980f8a4639781dd803f4808f1262d1dd82e7b74f3b5d8ae27e6609b53377a","first_seen":"2026-03-04T16:26:32.982713Z","last_seen":"2026-03-15T20:04:55.038845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/fonts/NicoMoji-Regular.ttf","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /fonts/NicoMoji-Regular.ttf HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/_next/static/chunks/0a025385f8c32600.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"221b0-19b2715ae78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALlR8BnZ%2FjpwC8AjiIcSFyMMaRx89KBK8UfRGrS6dVIFEN9x5vIDlGZHT6RNyjOmrW%2BDavUcKZt6J8hQznV8%2F16%2B32rCQghxBi1l\"}]}\r\ncf-ray: 9d7952b63b56516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139696,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GSUB\", 23 names, Macintosh, type 1 string, Nico MojiRegular1.02g;GoogleFonts;NicoMoji-RegularVersion 1.02NicoMoji-Regular","md5":"73c00071d90ecfb78bf0ccdeda529307","sha1":"f5df26318e31d02faa6fcd45e7768a44eadbf502","sha256":"c74f2f8cc83252adc86ab28a4070d33d1cadaee32ff4c314b47338ab53ae13f1","sha512":"5f164e191516ec6fc788ae0130ef5d0a98f2b828ab0a67f735e9dae10320e9907490835c835a78a3d55eae6c7b3240f2b9eb6b26dd950ba90eadb68ae7d4e9e2","ssdeep":"1536:KwMVK+QfXpDSot2B31RxUlviYtNk+qSCM4XDzCuX5UBpxqBVLY3j44M/LY3ibZ:KwM0+uDSoevxgvhty+qvpDuWG9zryd","tlshash":"e5d35c4ee267fc49fe15d63aa070e36552ee72d4533ac34aee0696faf059ce1ac04740","first_seen":"2025-07-01T21:47:44.504174Z","last_seen":"2026-05-28T13:56:00.629784Z","times_seen":17,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/pub_bets_by_domain?limit=10","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:01.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/pub_bets_by_domain?limit=10 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:01 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:04:00 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJqyA4D16rC%2FiB3hW9I81ijWZrsPxrFu%2FqTH%2BXRq0ZkXLXeT9DUXjTYi0VhMD0U3Y6HZUpeLozgGXaD9wf7ODlE77Jt75RZ4IXWi\"}]}\r\ncf-ray: 9d7952f66c12516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2975,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a8703e537da2cd770cb37ddee7881ce5","sha1":"683674aa9660505e2af50a133e72e58db98c7057","sha256":"14954b7577ed9c4818c59717ac8973fab3e27b84207380b0053926cb242023ab","sha512":"f543ba298fcf99897aff0a6ad3e0b442018b91709c8fbfd9da7a0bd5396bf54c3f4b9cb9de921464bcdc1cf6e4059db9be39f0e69b52ceb6d0b7a44738093ac9","ssdeep":"","tlshash":"9851f14fa68469b7233653b12e579a5ea0ddd42baccbf88d48f7cc229d6c115143e072","first_seen":"2026-03-05T13:04:34.865813Z","last_seen":"2026-03-05T13:04:34.865813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/2d3894a523d29c3c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/2d3894a523d29c3c.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"1d5-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MyCdKkD%2Bxx4O%2BxyCQRr926MiRkCABWEWaNzwKffqWePZqhqt3693CrkkKqYhAOW%2FkDfHP%2BYTsY0McBC6tkWVJrtr9mHWhvAD0V%2F\"}]}\r\ncf-ray: 9d7952ad5996516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (469), with no line terminators","md5":"890051a2f5ba194f62e0a2247ed852fd","sha1":"90c5c10ea2a46d80ed2cb963e88fc201d9f0bd3e","sha256":"28e065269e96e9d4ef1367a70be5a2cd4327b1a12a611101ace84bd22f90217c","sha512":"081ee2edc9cfc6d88a02cbf810aa184cb5cd4dd59afcd654b638dfbedce9929c4635c3bcb82096521cb3100001f18879c32c90dc16a42c6646fd202e80293492","ssdeep":"","tlshash":"49f0dc6a5e11bba82853006cf82e6394b2382038d32c5508c49ec5b0a179b2bb22a198","first_seen":"2026-01-13T13:58:34.419989Z","last_seen":"2026-04-09T01:34:11.943399Z","times_seen":212,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/526f6e3794e468d8.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/526f6e3794e468d8.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"dd8-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHCGp7TnFJ7bcUWMVM5jUTnpmJGld5drsjETat%2BvU%2Fn34M1308RwkBSjbo3cnUFXRr%2BiDhrXkFJB3vlwWMzJwOteGhQHjDpQFwXo\"}]}\r\ncf-ray: 9d7952ae8a08516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3544,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (3534), with no line terminators","md5":"eeac2755c3630d743a8d6a94b1c01444","sha1":"bc228b9d866f55f5fc42a9b6e3a3b6c3fd8c6296","sha256":"fc5c81254352974959f779c07e62e6a8a004a8563a794f6a6e3561c8ab0496c1","sha512":"feba86304ff673f1734d01ec1f81f978374753bf8da8098e80835495be2069ffb5f23afcc5f8b64e4df4686d01c3d5dee626890175e7687907f99169391827fd","ssdeep":"","tlshash":"4e71b51bc31872a707d311493eda02ca677aac4d7394c8a8de7c421c33fe1688637b64","first_seen":"2026-03-04T16:26:32.933929Z","last_seen":"2026-04-09T01:34:11.884827Z","times_seen":17,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4995390318262d42.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/4995390318262d42.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"842e-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3RJMEz%2F4VpXx56nn2KdCuv2ji3fCCcx4k1kRYaf%2BgRB9t5HkhyIJ3k%2BlmuYlelJz1ndOsEmOWddZq9Gw%2FuhSNicRxPg%2BcfcFfQi\"}]}\r\ncf-ray: 9d7952b13ab5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33838,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33812), with no line terminators","md5":"3b7e6d3b316671b804c05fe744c95765","sha1":"ec3b1e8ee00d6f9de4bfaad94e92c37c51660627","sha256":"92e69287b0ef61598b2880341eb4a6f73a83db8526723f8528761a2d7f2f7b6f","sha512":"14eeb08ef1ab3e3af27e167f9b3463e531d56f4283de18ffc940e37e7a747ef5d2fad361e8a72539139654d1df0a0e4331cdd842bb8d9a04f8769ddf5061afee","ssdeep":"768:H940K+YkVEWBxWj2VNofASv14MM9cYg5QDy:ddxYyBxvVNMASypCDQW","tlshash":"4ce2956062016ef8b3a704d4b46e854c701ebf9dcd0e8958b1ba7c1a2a84cd17ed7f97","first_seen":"2026-03-04T16:26:32.988955Z","last_seen":"2026-03-15T20:04:54.995413Z","times_seen":7,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6cec91c98d688ecd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/6cec91c98d688ecd.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"19228-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRHuXINkVn4qF2JouhEgIO46nwNlk3jcRX4B3Oge2Ek%2BtPFlUGu47P6S8nxPM5xZ40iwUCSQmXTQB4ARjbbRkB8HT7an7WTwIdXH\"}]}\r\ncf-ray: 9d7952b13ab7516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62772)","md5":"6ee8b38c151c60720027b8e277413502","sha1":"2d8ad0c1f655fa300b6fea3ba9636173615ca100","sha256":"0924557938dd8e1db1e02ff3a5f83c89f52b7ddcf0fbf696800089ba4901d7d2","sha512":"45347972db7f1c682aa564fea4cfda5fcf28fd337d665410156779ea58e5a729537d1ca71303ec0c2ed09f90973ed986929be55176deafb6b0ba846d8b794441","ssdeep":"768:Qf4TuqQAQhJ0yB4du3l72F5UgsXE2pLp+fhycJsK7KGMM8GoVYqN4V2qN4IkZUNI:sAQ72F5UE2D+pqOWYJ2L/UPsXBVZJ3","tlshash":"6da3a7b84560aaec765a09a4706ed19c701b3b9dd9d7ce18f4397d4b29800cafbc2f47","first_seen":"2026-02-18T18:42:32.557713Z","last_seen":"2026-03-15T20:04:55.07453Z","times_seen":12,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/sport_menu?lang=en\u0026tournamentCountLimit=6\u0026sportsCountLimit=12 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Ff6KUfTH6xWrf3WcY76U8os8a%2BcHkRVPyshnKYVNl8htzMoU8YqwVfuuZw%2FZ66jXJL6%2F0G3yp%2FgzFJThvOOspjeYUdXrV2ie1x1\"}]}\r\ncf-ray: 9d7952b75b87516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9414,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e6fe0f138e602f1069c9ce1804f01a4","sha1":"d8df08bf0eafea044eaaf1d79e67f2a807ef8e09","sha256":"9d61c46b56443d8b9117c4764460c9c47f3e6f2a4fa96420abd9bb7bc656ec37","sha512":"dd84dce8bdfc0bf5fb767869b8ec64b86bca663b003a7be05ea2e6fbf8a3f174c9014385a5015341fac31cbfa795fde72da41914849063ea4dd1e8d6d93629a7","ssdeep":"96:c7p/99CcJFriiI1VhymLXX9efopbysSyRZzYzBNC16VKrRbiRUypwiXMCo89MEsv:WfkXoC57","tlshash":"381204ae49122d8f47565ae07762236a64a00005af872e4ef8fddbcfa1f73ea4730145","first_seen":"2026-03-05T13:04:34.752807Z","last_seen":"2026-03-05T13:04:34.752807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_2.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_2.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"36359c9c9f2269f52a64b887941117ad\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FBF5AD1E\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aEysmWLKD3uNNvB23rugzuUEIj3a0kwgQrEQGE%2FyUtLUeFzpE7vz9yJfxTXPC47PVVxEcwLJFUxSr1lWxXI1towwtSTTGRHgX1b\"}]}\r\ncf-ray: 9d7952b9cbe9516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36359c9c9f2269f52a64b887941117ad","sha1":"2be94638fa3f8baff4a58b97e41d745c7dafbde7","sha256":"6153a48cacf5eb486258473e5f7a1ff7f38f4f814dc5f9e4625a1eaef5cd4f26","sha512":"cf44d52a2ea099b8f5c7ad9f027fdc4d6b632e6cc0b233239425e66b27a2f25102c3b1d291c1a8eb9991ef7541bf0a7084d691e31b5edd9e2b18ffb1baaad6c9","ssdeep":"","tlshash":"cb2102f892cda3e4c949c7f0952bb872791b31fa6e04c249b2f5dd80b3155bd885cd80","first_seen":"2026-02-18T18:42:32.488621Z","last_seen":"2026-05-28T13:56:00.787314Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/8f03b446eada2a30.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/8f03b446eada2a30.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"44fa-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMS6u45VKeWmMSzz2T52LPSHKNL7Tf9SiNM2G4oARAS5FANEzrui9H0RsYEe0bJdnVlNZPKQOj%2Fw%2B1tWFPQzpJCXu6av%2BGJnD%2BLC\"}]}\r\ncf-ray: 9d7952a848b8516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17658,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7779)","md5":"b1ae3e29d39df3f4d592d319d4ac991b","sha1":"c203e6fd3695ce74f2dc721adc262c5f965ed529","sha256":"035a7de337fcde320a4464c09d7948720b0b471a9b8f5ca78f42f9e0e3cce7e3","sha512":"8f22c6e182eeab38779cf557a30efe98151b9f5df17ad3e7e2f3af1bf5782908fa92d907ac7575c65ac0faf32359d8683d0b772ce4d56aa3a6ba36d838e9527c","ssdeep":"384:p5HpiNEoEhGcI6iXP/PsPwP9Ph0PvP0P8PPPyPyPfPz0PtPWPpPtPoPMPpP90PbQ:a4xI9Z82bhG","tlshash":"ee8289b906af1e7dda7d8690d4454f978bf90079bf690cf4c28c9a6b9b5c404c1bb84c","first_seen":"2026-01-13T13:58:34.510579Z","last_seen":"2026-06-10T03:58:03.943072Z","times_seen":228,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/news","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/news HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtJYcEW7nhidmfD%2F75cftx09%2BBYL9DeHs6jvKj3burAswws3bbbXVM7bPMzMBvRTVtBm%2BKeZLstmfWoE6EIAgtmfKLkwRHjcYLNI\"}]}\r\ncf-ray: 9d7952b74b81516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31866,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad5e8663ab868f1927ebdee0f6f8706e","sha1":"f16046c9df79100ea49cb4b063149539c92f914c","sha256":"210079e81d2dcfa1e6d257763afa5dd14466ec701edfd27b45fb9d8526d9bbe9","sha512":"9c403a8b92543596996691dd831465b2297efffb6e7cf5748c0d36aa1b78baf6713a220d2a1c2c1f0e1b7246dec25dc36ec9050b04d5694b2e46628fccc388bb","ssdeep":"768:iXKE/yedgz/wnsE7s9xlAOBxvDYucKp0hkk4nTUjkqSK:iX3yeawn1unPjvbLnIYqSK","tlshash":"4de23abf66f412395f8203d2e95f76d8e365522bc2c889a4e5c4da0c00d49eb632b9f5","first_seen":"2026-03-05T13:04:34.869972Z","last_seen":"2026-03-05T13:04:34.869972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/russianmachineneverbreaks.com/wp-content/uploads/2026/03/kurly-caps-mammoth.jpg?fit=1200%2C904\u0026ssl=1\u0026original","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.071Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /russianmachineneverbreaks.com/wp-content/uploads/2026/03/kurly-caps-mammoth.jpg?fit=1200%2C904\u0026ssl=1\u0026original HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T03:34:35.400809Z","times_seen":16750458,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":1,"connect":7,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/a5c8eb01cea61f04.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/a5c8eb01cea61f04.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"1fcb8-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rkjc8AOoigMR2X6jcU4NIMhJksabH6FM6Ub2TPmMXpQGmk3YdrgQOcQ8L%2BTTa6uuoIOXE4%2Bfyt9OONzfQ52Y2zdMqPD0dkIPKQK4\"}]}\r\ncf-ray: 9d7952a858cd516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130232,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"858ea4549a04f10df14e31dae7b216fe","sha1":"c7ce85780e7d7472114fa25800dbd80760984a51","sha256":"88cc7a4bd9efc3b97e55a63b14c54b9b1bf743fdf204c2781527912c32761dfb","sha512":"5f4a785be76d8c9dd92832c98d1e31fde6b7657d2afd59477c027e47cf47da8ed8821a00a063d7849b6c330df332528ca085f12b8cff086de571dea9796ed1f9","ssdeep":"1536:10AtS8CUg+gDo/41xV175V0Q+VdWhkCSi+GvAkvkJwGRxPxdZArIlxXHSHTq4Twx:+AtS8hf/41xVuamiBpk+GFFRz","tlshash":"d1d319ea73517521d3db5199c0ae4b41b33a58d83009403cb6bdedcb296099962ffb3e","first_seen":"2026-01-13T13:58:34.451874Z","last_seen":"2026-04-09T01:34:11.890111Z","times_seen":212,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/geo","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/geo HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQSgq2DMDI7WxIJ6Oj3As64Pge%2F2Umvnruq%2Fx3Pnk8uAhydN%2BcA87TzhY0esU3hqOx1K5TQ9RCbSDTE88GJaC%2BZHJfcZrRGReWLI\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b28adb516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"542122b04fda568516d89e55d6c36120","sha1":"6e28c2bcce9430899f90cd4cb8c54459918e2c0f","sha256":"d77a18a735b5cef136d19ac34ff02534a18bc96127e2d665d886ddbf47cdb323","sha512":"f2532b01e1668c855c3b0430338061bcf8adf13b67968335bf1abefe17f3ce3ffe3fecd97452de655a18aa1de27103f84f84db53b332b7e05d0fe5f5f895d3d1","ssdeep":"","tlshash":"6b60000000000c0c00c000c003c0030300033c33f333300cc0f0000030ff0000000000","first_seen":"2025-04-23T11:56:57.670009Z","last_seen":"2026-06-23T20:43:15.279917Z","times_seen":244,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/SportsNav.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /SportsNav.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 41860\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"a384-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tpa7eHE%2Bmz72tqtZfPhazX%2B%2Bu1OuxX72YkXNJ1QhZ9bMc7FxAa411FKvSA%2B6gtnetvvzT%2B7FtHiJ5PJXbdPSqVtdsMNm0DI7HwSm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b68b67516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 283 x 120, 8-bit/color RGBA, non-interlaced","md5":"913130413c36e1436c71ce072bd36bc5","sha1":"da2803b784bdb59ac6dd55e0187445734a86651d","sha256":"25282bbc0705fe6a7408d59fae78efd853f84e97859bc012ab3662cd41d876d4","sha512":"c61dcb2423692a4aee88144e257539d276c1d7c2cdd7af2a2b595d36af2279fc1512f62c5385262477445ea1b77c65c208cc6e28de58ec2d6b8ca20385a28f73","ssdeep":"384:PO2Bx9P8TNXDywPv74xssldHpcFzejS375KAu5utDn:PlB6DywExta75K3utL","tlshash":"5b52c0ddb5a9c564478b0606b70e19ad13d30b801b6f56bbc3d249bbdbafc4f05088a5","first_seen":"2026-03-05T13:04:34.872696Z","last_seen":"2026-03-05T13:04:34.872696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/bettors_online","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/bettors_online HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2E%2F2SrICFVfME02Oi6zfZVizP0q0NES30C7BeOSPPvFncHUvVsEO0m01XAuSdTiadLF4BCUT%2FYS4%2FqgIRSbHWttvs3aEFI1W2%2FDY\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b74b85516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"92fb63db9dbab0511c38651adcace812","sha1":"82294e830c08eb5e1bb6cb3e3153528d0cc60722","sha256":"d1b2274f2491fa8e3f19190a8051d8cf9d4c4f02293cfd9d1ac4c41a18fcb339","sha512":"3937dae5796b31e4a796b19b4a40a42a5da99cb11ff0afb09d31e0e5c798ee78fcf01f1cbf94e8e769d0945d39ce5996506cca5bf6cdcf47684736567cb0dc56","ssdeep":"","tlshash":"95600000330c000c0c00ccf0f00030f0c000003c00000f3300c000000f0000c0000000","first_seen":"2026-03-05T13:04:34.874246Z","last_seen":"2026-03-05T13:04:34.874246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/src/assets/fonts/Inter_18pt-Bold.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Bold.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AIHhPOBh7myHHyZPlf83HWPvHqGd0sIzZekJJzQuocsRT4T0WmLYuEE1il%2F4e4d57SEP19sHRpWvZjcY4ONzd8vU2EMnjs7XXtJ\"}]}\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a848b3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":38636,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23732)","md5":"df916fbefc3abff6610809742a07ecda","sha1":"f71bff5ca27ac032c42bc71f5e54eca103a622c8","sha256":"8769d2e69ed9f0bf88e0537cd458c219613102a2884221012140978817bd82dc","sha512":"06ccd71501ac7d78b164daa284cd58bdf74cb9b34f4ddec505bf7f0096bdc85f97cd365eacfc79d84caa4d43b3a75e682edbb78f301fdfedc192540985d15595","ssdeep":"768:0EECC1SOkziFlBClH7ThSL0QjVWwBJJPw:ulBkHhS4","tlshash":"8d03761ba803c916a96eed1812ff2f2d00cca5378961dc39f79dca4d0b8157e47e6e85","first_seen":"2026-03-05T13:04:34.8762Z","last_seen":"2026-03-05T13:35:40.293185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3f37cfb4370f2161.css","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3f37cfb4370f2161.css HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"21be6-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Z%2BJbyV4TvW1i8q%2B4uc2P%2FA89xf6SqruHdIO1iLTiLnE17KoZtX4PLJL9Dn36rPBySVJYYMjwifVVJxCGXH77qpPHqmI6DzWC9R1\"}]}\r\ncf-ray: 9d7952a848b9516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138214,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5d17fb20e68799405263214a0e4c88c2","sha1":"b8e02126258cfa5cb8409683cf6ec3abd74f2d5c","sha256":"0aafd340805d48584c3249bc7a9a1e3cda5595ea43ed73e3720c681ca9290ce0","sha512":"0fb473a9a2fa1c59baed55719b308d46de3e06be789bf873c2d2991c14e5ddd69dc7db8693038e7c0d37a00cda2230ff9b8400e2d5f46b4f7097e4489ba5e703","ssdeep":"3072:jQ4B56hAF7fkpRObf0R9LekLOZv8hrkegp2G4XhE6c3x2qpiOWMlxoMlparDOm0E:k4OhAF7fkpRObf0R9LekLOZv8hrkegpq","tlshash":"0bd397a16327953fbc1b90f192b9fc8c712bb291ef2617e8fd51212267c1af50d26724","first_seen":"2026-03-04T16:26:32.99973Z","last_seen":"2026-03-05T13:41:16.410671Z","times_seen":13,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/fonts/LemonMilkMedium-mLZYV.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /fonts/LemonMilkMedium-mLZYV.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15664\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"3d30-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AK8fJrjZRFLw57h0ssD2NvvP4GsMoMIbsy6nyTBYLIaBNtcOOQo%2Br7hbV3S63kTnNDP7uieeKBS0zcF9pZUK%2B4DRtQARcr9qDaDK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a868db516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15664, version 1.0","md5":"29e8a37a85b730f1486a2f1006da40ab","sha1":"9a2398188c9d837067342a92507ebacc38cd74ac","sha256":"6eaff8f74e006352147a30270c11333cde5ae944af8df06fc0e0e6d6a024b579","sha512":"d5c2004b7caa55c6a8a8c816f0edda33ae15b104907397fdbbe5a78c07866738db6a916002572362c584f81f562fd38b1d398ad28a5fd05b8b4d8357a33be1a1","ssdeep":"384:4wcK/SVdYbLKTpMr80tNq78vOqEhLL98SR6OGk+l27k7:4wcK6VSbLB8kq762x7Rpb+l6k7","tlshash":"f462c089e9f99558e2b17a2520f187e7a508c332cb26b5f8f209388455edd1f1c20776","first_seen":"2025-06-23T17:45:24.278891Z","last_seen":"2026-06-10T03:58:03.864194Z","times_seen":232,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/responsible-gambling?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /responsible-gambling?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg3IsfPRg3kie8tjjWFATG8Bli3XQxBLezmc5Iglfz1LA2Wh3JLQ6lGW60bbP%2Falx%2BlmM0PVXi9cow%2FUQFcSjxKBzwe8huX5s8Hb\"}]}\r\ncf-ray: 9d7952bcdc75516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (307)","md5":"665ac8e8dbd59746ef8aabf40dc1fc96","sha1":"5d77b6d5671c833cd7544582b3e36153c30b3558","sha256":"058c02f5823cb3890887b66a649767bbd6fb45b4ff942f5ff8c535d682ac048c","sha512":"8971a08b1c1adaf0b5c6c6ab3c4b269f7d264f40cc671d91ccf2474bff0e4f55f9452b3df69a0c006302e19b7154a160a70edde1fa4913101f27056549e991a8","ssdeep":"","tlshash":"6fe042231d4e15b31abf10f0852d9a462999de3b339869f0c0511d2f3f7632a93cfa85","first_seen":"2026-02-18T18:42:32.367637Z","last_seen":"2026-03-15T20:04:55.001168Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/favicon.ico","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNDSKrJ8K2lO7kZ7fXGx7upm%2FbdpOtWQcWFct1E82fVsyZl%2B%2FyMMLeJS0liDXu0FpHWCw4OdWDeeju8z98Vk6SwjOSNl%2BDF2FS%2Fu\"}]}\r\npriority: u=6,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952ab292c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"9f65b3f818a15dbe7b4d16504fef31fd","sha1":"9cc3dfe7f13d8f6e4145de208668bed4eb83d08e","sha256":"836c54de35c138e8c72c8e7e2836346d9e2aeaa4dd06ef23e4880e61ab8b32cf","sha512":"0a2f2de10ff8d0dbfeb34c8e6129b6f964836c8d586aac7d83554c33623bd34e41a41ed7c69b6bce4fc24d46b6189b4e1dccdda5a34431d0c9989a5ede040cb1","ssdeep":"","tlshash":"3e214f4bdb0125afcba8323047850d76905e8832e399e7e251994f27782c1d87f6535e","first_seen":"2026-02-12T20:36:03.580509Z","last_seen":"2026-05-28T13:56:00.617986Z","times_seen":48,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fglow2.webp\u0026w=2048\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fglow2.webp\u0026w=2048\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 131163\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: ZPu9mxgtUGq9khLS6nwhdcwcVF8Np-r4HHh1Y_a-yC8\r\ncontent-disposition: attachment; filename=\"glow2.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qimw6ivIJZZnmXmTOnKD9IMPOT9TIWU5Cjd261RTysfymJI7NLmCIiJkJGcccIFXgi4g8qq9Cn2bmdpqzA43scRo8zzRzWd4iS9R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b7eba2516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131163,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"482d73a19fcc482451f05715c80871f1","sha1":"d10b8806d255469d6539b722cf91d9f019c10d3b","sha256":"64fbbd9b182d506abd9212d2ea7c2175cc1c545f0da7eaf81c787563f6bec82f","sha512":"c72152c08210a3376772a9441aa4f0ec16ab29aaf7db65af4104734303ff6fd9819f57db6ce2044c1fbfbfd6fe36a13c4f889acb39623cfafb6e951dbba51937","ssdeep":"3072:vHTWzjeOBrR9T0Rhu6FHqD84q6kzzK75BUlDzApM733:fkeOBrR1EhtKDC6kfKlsn93","tlshash":"a0d3135a763de536cd2cc03c1301e558dda128e4072bdbe87f623d997ba5993bb41ca0","first_seen":"2026-02-18T18:42:32.470463Z","last_seen":"2026-05-28T13:56:00.642346Z","times_seen":16,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.deseret.com/resizer/v2/YUSSKLJIWVGEDO4LJ4V2BLEVRE.jpg?focal=2675%2C1065\u0026auth=a519bd03e176c6bc9ad668af6a28ba38c64bd205263276f52117b4c9d8ace434\u0026width=630","fqdn":"www.deseret.com","domain":"deseret.com","tld":"com"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deseretnews.web.arc-cdn.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 22:00:29 GMT","end":"Tue, 26 May 2026 22:00:28 GMT"},"fingerprint":{"sha1":"E3:67:43:E8:C9:84:D7:A2:A0:68:F4:9E:C3:62:66:36:73:C4:DC:86","sha256":"F2:84:86:0E:73:43:38:1C:D8:0F:7B:FC:A6:4F:AB:C6:10:3A:75:F3:B9:CB:EE:45:C7:66:B4:2B:39:39:09:E1"}}},"request":{"raw":"GET /resizer/v2/YUSSKLJIWVGEDO4LJ4V2BLEVRE.jpg?focal=2675%2C1065\u0026auth=a519bd03e176c6bc9ad668af6a28ba38c64bd205263276f52117b4c9d8ace434\u0026width=630 HTTP/1.1\r\nHost: www.deseret.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Mar 2026 04:52:23 GMT\r\netag: \"5b395d6ef82212ed603f18e20adf0716\"\r\nserver: Akamai Image Manager\r\ncontent-length: 16620\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=31420121\r\nexpires: Thu, 04 Mar 2027 04:52:32 GMT\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=35, origin; dur=0, ak_p; desc=\"1772715831145_388254838_631789711_3438_16550_0_50_12\";dur=1\r\ncontent-security-policy: upgrade-insecure-requests, upgrade-insecure-requests\r\nx-arc-ttl: 31536000\r\nx-arc-request-id: 0.764c2417.1772715831.25a8588f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16620,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5278137c5dc32cdecdd61a3e8c59078b","sha1":"ba9a568367c4dcc0b7d38bd927166bbe19a0364c","sha256":"44457ee5ad9f990b2246975c98e310237227e18205bde939fddbb3b61e3be07a","sha512":"6cff00e3bc0967b64195619b559fd5a72c5ea75c0cd864ce70cb554f222a96253f7bd52e1eb9965f15f9cb3f9137b5b02f2b83c803da138d0481e119367c57ee","ssdeep":"384:rC7i1fPWZ2ted/WvCqcIfN+bVQM4ppY5/txf6KndgKdWSGoXk:oGGgted/xqE6HbydpU","tlshash":"d072f2d7dadc7b4acac604b836f73100ceb9675605204b4e4d1fdfb8280f229c096e95","first_seen":"2026-03-05T13:04:34.883585Z","last_seen":"2026-03-05T13:04:34.883585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":105,"dns":53,"connect":1,"send":0,"wait":61,"receive":5,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"bd30-19cb66cc6a0\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBCNaMhXHqZaIxV0m0DCOmhHjM074loeVt%2F%2FGaPR14sN9uZl1cguOoA%2F%2BX2IowN4JzP4fenA4cQMpwfohSTcRSI8xUFglbk0o8G7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952aa591a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-06-27T03:36:24.508226Z","times_seen":70201,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/headphones.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /headphones.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"2e3-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoFQk9Ngb3a1BDQ1RcFay8mo4pxk2dulpzFIg3HEop3%2BR3kz78teO3dZFOML22ZBdoZaraYwvCQfDh6spJE6W1s47IZ%2Bj78URzER\"}]}\r\ncf-ray: 9d7952b65b5c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a84f21d87149d80fddb6d68ad10faeb6","sha1":"076cd17cd517cf626d24e393f307f94b3f59a101","sha256":"7b34e17cbaf6a25d779df7f3972ea0a9bcc909a421f25c6dd17b4a11ffd56c54","sha512":"6f58a13e874203c991fe61f5a60bbb3a25145ee8fc37591f1bf2b60345b933312efaeb0a1e809f3af9dd94ba4bd7278637835eb86643b05c8498d65ebff94af9","ssdeep":"","tlshash":"010161fc279491daf1cc8b61605cb0367da674bb4592c005c094dec192d51af824dd92","first_seen":"2026-02-18T18:42:32.397514Z","last_seen":"2026-03-15T20:04:55.028663Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/categories?limit=20","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/categories?limit=20 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8p9ZLkdeIkDGF6ybF2hbBOa44QHWH%2FRuCjwHgu07hq%2FNE4%2Fyyp9q6Bsxy4ZU%2FBRemLscMwCachiIeDUJNeVV8mQQxgIb%2BZGFz1fh\"}]}\r\ncf-ray: 9d7952b73b7c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6fd4b0dce0c21a4fa892692b1cbaab51","sha1":"960f99f24616a9cede486663039d858f389851d7","sha256":"8c4eefbca717cb6452d3995ca14f6bef01f83de1bb5a63324a210a974b6346b0","sha512":"14c5741d7b0229354817a9e1d8072ded9cf4743386befc4f4bffa7cf4bbdff35a0ce486c16275867eb0909fcf49c8acdd403f158ac69b78d35a7b63dcf44347d","ssdeep":"","tlshash":"52d09ef930ca69fede952d00a59b3da9b4854423369d6f8244d48a80b2c7f9c301d115","first_seen":"2026-03-05T13:04:34.887675Z","last_seen":"2026-03-05T13:04:34.887675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/4d9e359e785ef23d.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/4d9e359e785ef23d.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"deb3-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xs%2B0BVCyXTylppUF0FF8AqgnfvilPwtBTqtbZJYkqcYUqSZkipts1SkE7vrtSc%2FJH53jS5oaaJjj1n2WGUquulwoQfyQmk%2BwAAbY\"}]}\r\ncf-ray: 9d7952a858ca516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57011,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18190)","md5":"5862e9ea187de01125083d8c20f68f7f","sha1":"2f52c1d0570e5309a8b916b5916cc49cc56c8112","sha256":"8bc9afa09ae79ef1872292d06433e1a020f4f28a36c835c449f702383dd6dbec","sha512":"0742e5df535951c62c09c7718dce33597f473c260a68166600e857dc69a1a4399d2ae3bfbedbbba47a377f1355fe8639e35a851832108a10e4418364fafa6a1d","ssdeep":"768:eVr8+/eSI/CII5aZQzhOTK6O8uxlHV3MgOR0QXzEugD/MlYb:8g+WSEq176O8iV3MjhziD5","tlshash":"b34319a33245f9a9575785a0e43f830ee22c6c38581a8124f3ad3db95b95cc0d5e2f7b","first_seen":"2026-03-04T16:26:32.927704Z","last_seen":"2026-03-15T20:04:55.154911Z","times_seen":16,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/a8808de2127569cd.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/a8808de2127569cd.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"41a-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2Kf670h40DUsm0hTFX55f81%2B0%2B4pKl9FBZ1ixGiTYHGJAwGiVdgEXyBM9oxwbbm7XbTYWlVbI2GnRYIA1i6mkI7%2FC5LQP0uo%2BfI\"}]}\r\ncf-ray: 9d7952ac797c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1050), with no line terminators","md5":"0ea1b9253e3ed7089d054435ac46f26e","sha1":"2fa15c822c4ee1b38c308adad8ca16268ffa4d9e","sha256":"a229cd15a12b0326155b70ee20391c72bbf66b3c66f08f56cc11a47ea6dfd2ae","sha512":"4254104610b9e5bc89ecb4de7fcc4e965c3b5ce63e571221fa9fdb76caa29f8a04b5c4da07c1ece73d30ff5524f390728e15ddaa1c45a3526a5d1fd21b6f83d9","ssdeep":"","tlshash":"b31121d4a2875af909ec32183879c526d0f013cd808dc457ceacd12031f3e61bd91791","first_seen":"2026-01-24T14:43:36.985114Z","last_seen":"2026-04-09T01:34:11.860191Z","times_seen":210,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.deseret.com/resizer/v2/YUSSKLJIWVGEDO4LJ4V2BLEVRE.jpg?focal=2675%2C1065\u0026auth=a519bd03e176c6bc9ad668af6a28ba38c64bd205263276f52117b4c9d8ace434\u0026width=630","fqdn":"www.deseret.com","domain":"deseret.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.058Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /resizer/v2/YUSSKLJIWVGEDO4LJ4V2BLEVRE.jpg?focal=2675%2C1065\u0026auth=a519bd03e176c6bc9ad668af6a28ba38c64bd205263276f52117b4c9d8ace434\u0026width=630 HTTP/1.1\r\nHost: www.deseret.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T03:34:35.400809Z","times_seen":16750458,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1ea-1f1f8.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1ea-1f1f8.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odFZeGpdLT9iTov5JNMCSACPeC3OSnDFmseiMEr7YzQ7FDTQNtI1rlYBaOdujqedfWtqSrZFZ4ePtHID6OBQmFVcaUoV7TFcxOPfvOptEhgl\"}]}\r\nage: 8722\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-275\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d6cd9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8224968196d0dd6d84e44c98093c280","sha1":"882b8a579de32e24e13e999b411abd814071cc2a","sha256":"f8cf69e4d0d285ff8e9be18f239b65e38fe1a235086a8daae53b1baa1e7a3557","sha512":"096da45f1e9c9fd020364a51f387110fe6b08969d607a52acd6acf7f01215e15ebb88c93484b7aef1392143f744ca491f8862151d5c4850ec8f7b9d4d419e870","ssdeep":"","tlshash":"bcf049c5743db18388098b742d6e70e6408e721b554814dd70079b28a3aa3df7ac2f6c","first_seen":"2023-04-17T16:03:39Z","last_seen":"2026-06-27T03:44:47.190164Z","times_seen":10621,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/8f930a8b3cb46897.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/8f930a8b3cb46897.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"228-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFEb6dpSsbpX6O84thS26TX6SN43cZEWBsTYCDBl6TnPMO1ky%2FTQrdb8lL%2BhjZCvQzIgUscGZxS96tNq81uzM0dR6Ii9n3l5CYpO\"}]}\r\ncf-ray: 9d7952ad6998516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (550), with no line terminators","md5":"b192b337f0c29559d82b0cd04d321993","sha1":"9d0e362c0a91e4d9697138bcb730b85b4d8484d7","sha256":"31de4a951fced7b4390ef1aa19880534c41694301ba2a83657b11d3a05bd5cb3","sha512":"60211d0b03b6f968e15b738db7596a40831763bac184ce9c4b061830f40ba9715af4d667c96c3387072789780920b3ee730251548c66cdc34df5eb131490e7b7","ssdeep":"","tlshash":"c8f0c08cc304706cbc4a13f8f7e59e3d53bc0c95e1d99508a89f4f6c2239519e0aab8c","first_seen":"2026-02-01T14:00:57.533869Z","last_seen":"2026-03-15T20:04:55.158975Z","times_seen":97,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/home?_rsc=18cpn","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /home?_rsc=18cpn HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(loginLayout)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hx32AVJW7DJOHVelfLYWfCORuR7Y7UtijJEQFo7Ps%2FOJh%2BjKykno10owreYO64ckg%2BxcU6Uszlcvzr9jsw4%2BkxT9N7DQEbO0etTU\"}]}\r\ncf-ray: 9d7952b0ca9f516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9090,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4176)","md5":"e393ff8237fa6844d71306e3d4672c4f","sha1":"469ecdebf16e544f8dc034b3a1594213641a019d","sha256":"59d6f834e36f175c777a27c7c5499ecefbe030fa3959fcbcf5c55272aa6dbe54","sha512":"f8fdaa64b4a3ed274ab6bab191c157e7084cf3cd9b305177269036744cd367a21613d606bb4aa6510c62cced3dd40baae15aa6c5a1860557e14984ffbb93fa3f","ssdeep":"96:hVO1/QUrULXXzlfUHDAz/kM/VN9epbPM+cGR/7mJRLI7/8aU+ssDJF:hVO1/gbJIAz/HNN9aM+rURM8aZssDv","tlshash":"5f12012bcd09ee5a5e76c9ac142fa706918c8d37cb308cade6ddcdac125416b1fd92c1","first_seen":"2026-03-05T13:04:34.892261Z","last_seen":"2026-03-05T13:04:34.892261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/coinflip_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/coinflip_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 572492\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"637822b459d90e17a9ea6d63aaa1ffd8\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A823DE818F\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11fK3ZjaL3EMYWJMdXOmQBXv3gVvi%2FLzGU8PWjSbD%2FbipXnhgT6VIoetr0RlyjlVtYVf0t3qHumvb3kbGrXgkemx9deVJjCMpSqV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcbc6d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":572492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"637822b459d90e17a9ea6d63aaa1ffd8","sha1":"77900dabf58b4450e3baf7f8ca2a864449decf7b","sha256":"2f3f40a06d5f5a946f6e56af2f468617fbe8a79074913793121a97c89e82f94e","sha512":"976fb5c72d4e58599969ead980d2ed9c668996dfd058bbfa222df2655a3ccc0a43036c5b2e6bcd6651c458d1b205ef434962ee5083983ee0eb017a117448e136","ssdeep":"12288:WJDrlUvTqkNiVdKgy1qS2ESgAbK5JUNO6y2JsdwFcjG1HEKcVtV9LfNjRSsNmvMb:AJUvmk4K7q8SgCK5SNO6ycewa0cVtLf3","tlshash":"52c42366f67050e44b5abe2f047396536213190e0136f62a3b492ca171ccfed7d7b89b","first_seen":"2026-02-12T20:36:03.622497Z","last_seen":"2026-04-28T18:07:01.618308Z","times_seen":36,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e58004fa60875eed.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/e58004fa60875eed.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"56a-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4VGg1ID9QLTc55Z45Y87LEijhqjXMNfU4JwskNXbdlv32BNUOblukkfOXb8r3reFAC%2FwUZgeVWrhMYr9QFYXuGANDXv4oj6CJeU\"}]}\r\ncf-ray: 9d7952ac7978516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1382), with no line terminators","md5":"cad4d7ce3ebd47abfdd10fb1ab546a33","sha1":"702aec8e78dc8eda208fa90b29db007f2bf27075","sha256":"c7ad2c547ebca4eac43072506d3ef6f47f2e79ca1e227533a709f8f6244f97ed","sha512":"aecaac8ddb0cc3eaf89e357b85a4b266b5838f3b8f0e6ad4da56048ae3b8ca0b191380161ae4612cd7302bdf740b15a6c7905ad0da21b69047c3239c873538c4","ssdeep":"","tlshash":"f421318d4201ba581013578cb0e22760767d40d9d4ec806dde9d0fc8a1bb138903f9fe","first_seen":"2026-01-13T13:58:34.409252Z","last_seen":"2026-04-09T01:34:11.905641Z","times_seen":212,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/notifications","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/notifications HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GclFbBLX25BZ3HsOTD8AX29VAwLucyOAG5bd1mSSBl0LXqvUH3fQCgOJgQD9Cju9Zw3xxakzuZQNnwbH4dErwPL3jUJXrWu9vMT0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b73b79516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/sport?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /sport?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpqetGl2ltVBzIUfiII55fOYdvGA5nv79pC1yXNCmV9eXBjwf4KFrqm%2FwtypKpaQ86zRbkekjGzay%2FQelf%2B1H0iGKfYXeMFnMKpi\"}]}\r\ncf-ray: 9d7952b7eba0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"42d0e0ab2ccbdbb9b6c565ea859c3fdf","sha1":"f4be7e210a03cfec0f100d734e89b8c95f646704","sha256":"fe37797dc667a6c8b4e2d66c23b72560617f4b2ed85241c54a856d5a001b803d","sha512":"3ec0f6dbe0f9a76b8cfa6a2dced7e6ec9e556b64a1066702234034d23f098b8e80c4fad922a4adf92d0139a96c8560c895ae9efa0ef38a26df2362964acbf764","ssdeep":"","tlshash":"68e042231d4e15b31abf10f0852e9a062986cd3b339959f0c0911d2f3f7632693cf685","first_seen":"2026-02-18T18:42:32.497209Z","last_seen":"2026-05-28T13:56:00.674829Z","times_seen":16,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_44.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_44.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"2cc3f2dfd810632f61dcc4183691ef13\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FBFC5C7D\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUjnHPIs%2FQGBpHw9AW34RX58wEJhkMpECD1GdMHlfPMesvw2er618msagANcaowTBsOZkloBxBQPYm6gmJ%2BMTJKX2B5ggU1Mx2LA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b9cbe7516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 23, 8-bit/color RGBA, non-interlaced","md5":"2cc3f2dfd810632f61dcc4183691ef13","sha1":"d10a3c13c7d05bda90df70088b88051b6d459c33","sha256":"3f7e6c5fb4718e014fe6ff8b88e3e94cae7e21945879dd19185f9227c8782120","sha512":"498231476832f50d8ee075f83163940cc6efb97b94461a2c6642c7444cbddc6a0e5d6e7b73a96d71b5de8de7c62ee3014023045bcd7d1706eb302ed77117bc7c","ssdeep":"","tlshash":"12f075d6bec40ef60ecb3a17f6c9899c364ab87f5fd24c892c40d521984d6978e02397","first_seen":"2026-02-18T18:42:32.446159Z","last_seen":"2026-05-28T13:56:00.632729Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/free-spins?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /free-spins?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpBSdywDnwv%2FT5NtYs4h1eqBgIVRKaSqkn1sNrnx471DgMjI%2F8ROUC%2FZTDQePW2dPKET1Li7FmbJm869lgQAFKYCvwtHiEEfxNGU\"}]}\r\ncf-ray: 9d7952c18d60516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2943,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"6aa59e70a0e20c8e08c4b476b8f5dac9","sha1":"14d43b6c3181070cfa34784910abe822ba621204","sha256":"175fcd3dd071bd86c9ab59de7a0804de6a0f94f40f6bc927550b889a99dc64a2","sha512":"eb386d37a703283b51387f842b09fc62b53b245cc8ca11d8c571d1a9a48be9bac4c0f563ea6417e427eede80e953d5b2fccff7b433dfb7bde39336fd83b5edb5","ssdeep":"","tlshash":"9a510f3f8700edde5797466500ebb249664c473b57149c6ac4ed4d0c238622f1f72ba1","first_seen":"2026-03-05T13:04:34.897347Z","last_seen":"2026-03-05T13:04:34.897347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f7465db492e6b331.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/f7465db492e6b331.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"4813-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y73WBfrHWb%2Fy3TtIHDhnYIjIOhNKXewRgLZuyTTtk1%2FJ8ejDikcgjKtgXEbxFtup0VLilZFOJ8uTMtw2ExEyITJkj1%2BBBUkG2Ka%2F\"}]}\r\ncf-ray: 9d7952b13ab4516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18451,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18451), with no line terminators","md5":"068cbd1460639fe52fd985eb1332abb0","sha1":"0331a048e43d60a4734bfa03da0c6910abae6a8d","sha256":"d9441187b773b5079a46cbfce0184910c03419db00764cebb77fdaa86f45c015","sha512":"8218736bf1159c112a8651fa2e635b8016f9e177b247ee58842749176ff175cfe9e7abb9aea2d20fb43ca32975945fe51900d6a86079d757f9cca7109015d9ee","ssdeep":"384:nRVsrrjRG2RR7EE9Ci/ismVOo1hfqxPCz6f:n3IrjBR+E9CiK+ozfqd9f","tlshash":"208298d8b292b06156439425853f120ff23f7818614e5458f2b9e8e26e78f8d216bf7f","first_seen":"2026-03-04T16:26:32.842746Z","last_seen":"2026-03-15T20:04:54.994696Z","times_seen":7,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/5c2dfa3698d55f88.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/5c2dfa3698d55f88.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"6d2c-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcTNeiHEqpP3jzwSA3pKLh5VvkR%2B3wEuQ99uIcx4spuPeYr7pMpNUtE2b7JXt0DXTik4lxPkkZ2KZnFsPbCOd7gKo%2F%2F%2FJWzzNSU2\"}]}\r\ncf-ray: 9d7952a868d6516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27946), with no line terminators","md5":"c312afd971809bc3db9e5eaf65868390","sha1":"cdd82208f11ed1d19aaa2bf28cc1e4d0a8c1f34a","sha256":"66f9a1dd8a15357102bd6b4f4a566df16ab15216f7b3c35bc7c9078a59ed512b","sha512":"4e803ee0523cbd43eaf547b43af59622b2b328be96152cc63e968812ad2f9307840e856048a5f5080594c2b3ba39c31b3b842480a2b1c0e5be81744bf6afebed","ssdeep":"384:bbga4IZDHYamPknd8llyLzJFtQUVA/z8oWDmuRHlZ:j4IZDHzO0LzZtAwXZlZ","tlshash":"11c2b6b27395fdb212db81d9c03a1005f2650c3521ae24b0b395ccef769dcd992b6fa9","first_seen":"2026-01-13T13:58:34.388892Z","last_seen":"2026-06-10T03:58:04.070464Z","times_seen":228,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/src/assets/fonts/Inter_18pt-Bold.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Bold.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4xm7D1dr3mi3JSCNm3A88jnbnH0dhX183rUzSpLe6XYdlAdsxIFANwfS2UMaC0UjmbzmGh3P3XFC5N3OZLczkghPiRGIuy%2Bdmz6\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, must-revalidate, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a868dd516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":38636,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23732)","md5":"df916fbefc3abff6610809742a07ecda","sha1":"f71bff5ca27ac032c42bc71f5e54eca103a622c8","sha256":"8769d2e69ed9f0bf88e0537cd458c219613102a2884221012140978817bd82dc","sha512":"06ccd71501ac7d78b164daa284cd58bdf74cb9b34f4ddec505bf7f0096bdc85f97cd365eacfc79d84caa4d43b3a75e682edbb78f301fdfedc192540985d15595","ssdeep":"768:0EECC1SOkziFlBClH7ThSL0QjVWwBJJPw:ulBkHhS4","tlshash":"8d03761ba803c916a96eed1812ff2f2d00cca5378961dc39f79dca4d0b8157e47e6e85","first_seen":"2026-03-05T13:04:34.8762Z","last_seen":"2026-03-05T13:35:40.293185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/affiliate-overview?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /affiliate-overview?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtNDZai59Vob4y1Iq6AQdmNRTAnBm1WAmQi%2FRC0%2BsWUF2E%2FK0xfa23ok4QFMA1rG0dwXZ2Fj4i9z4%2BkL9ZfS%2BQe8lfkxjMAOBWRh\"}]}\r\ncf-ray: 9d7952bfed0c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (305)","md5":"f9c7e309b63762cfe4a2c5e3e5d887a2","sha1":"83ba77c1ceeba2e3d346690f002ddda9b1cc0771","sha256":"96b2a1d52716e1fa7b2709734c4906cfb1586a853936d5ad5ba57a052667e8c2","sha512":"f75cec9982cb88df2dd864126e6e17f98f2b9fd645a38943fe9539b162230abb6ce27d5d0c5441b316b02a40551ad05807818233aad255b021b5acd5f22b8685","ssdeep":"","tlshash":"18e0e2231c0e19b31abf10f0862d9a062a85dd3b338865f0c1611c2f3f7a32a83cf685","first_seen":"2026-02-18T18:42:32.549602Z","last_seen":"2026-03-15T20:04:55.001955Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/ss/user/support/chats/unread_count","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:04:05.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /ss/user/support/chats/unread_count HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:04:05 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lk2bQZDMUEM1K66aq8SdTjdA%2FPwJ9XOrII601PBQiyDKyNli3j0J7Nep%2F9%2BCuIrT0nyyRTvLoxLJcG0xOVd020EWsHDR7eWAtkYd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d79531448c1516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/ed6a21b61884d08f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/ed6a21b61884d08f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"1b2-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exVUzG0mGoc%2B2HgmpBzrv0SXQiD3cU8Eb32YMuJEXavYYRQAXJplCTVxq5qvBUtPHGcceUfXF%2FYxxc4om%2FvXjzGjTEKsJulLL9%2FN\"}]}\r\ncf-ray: 9d7952ae8a11516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (434), with no line terminators","md5":"0442542e692edaa8fc0e24f76ef11257","sha1":"6e09219f74d7899ff1af0669bb6f0fc50c99fe2e","sha256":"ecd810778e01141a8506a8c43ae45efc9af39db9dcee69d63703908b6698b3f7","sha512":"3fac299901bf52b2e70581205a980a53951baba329e7e50ce4828f3d0abd3881e7eddccb53b60ae41d85aae080385d3fbb2757536d74986338e921142e6e69bf","ssdeep":"","tlshash":"46e0ab6cc0114a691894c49c7ca8a22834297c3f81c99418fafccb6c7536fa2b11969e","first_seen":"2026-01-13T13:58:34.478837Z","last_seen":"2026-04-09T01:34:11.904898Z","times_seen":212,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/6e7332a64713445f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/6e7332a64713445f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"56b-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xL9h%2FFSsDjh46pfh4mtF2pVCxxyZBj%2BGniYFoAU4cgoXC%2FDVl7O3JfMbzFZnei2KxgJc4eGVhyMX7B4nZPDfjpQJBXd%2BAZWQ3hYY\"}]}\r\ncf-ray: 9d7952ac797b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1387), with no line terminators","md5":"640bbcc093f54267cb84eaedc629e5b0","sha1":"c1d3cc52ecdf674d8248abfd9540e7632fbaa44f","sha256":"95db70d4b5e2a13349b7b285499ed4f2f3cd1cb5faf089e35e68a3296702f5f3","sha512":"d977fbe41ca2531ff4c86b602ec807a872e89499fbb05f17aacb5d8692502d10617d67c1f0571ba8cb8619122fce6adfcd6717a63c67743728062379d6ed5d39","ssdeep":"","tlshash":"3b216346f50960f70ae973073cdfdebb61ec1044862a04249edecc3d03f0599dc1249a","first_seen":"2026-01-24T14:43:36.945615Z","last_seen":"2026-04-09T01:34:11.934618Z","times_seen":210,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f46b8a1c73c0617b.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/f46b8a1c73c0617b.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"b9e6-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwDTvUQpAWx4jkYDAGBh7uvGUmcnzmTNB499QwGsCrJoa%2B6Md9iQLrFiHsjdWXfJXfWE2ABUuqyo16FfR0SN1cXSoxl8vkuIsQHC\"}]}\r\ncf-ray: 9d7952a858bf516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47590,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (47590), with no line terminators","md5":"6e1e61acf0ec39c69b58f66064941ce7","sha1":"7fb45e5309b2afed15a3461a3b55dab37b95ac92","sha256":"d1f0a82a2adab5ceab302a8ef6af408340d90f0184b789a7160d6de4dd9b9bc1","sha512":"7a5be9f39ac0668184ed3ad8e2c078da5b6787cdb2245b085f44fc7875b61fdb955d1c0294f43fd76134cbbd7a9b1f9f7db74ee2536ca56c7cbaa410c7e03917","ssdeep":"768:q5Mvs8TRqnxRxdP9lsJr4fKT1LpvwutT8kxBMh8iuX:Y8TUnDxdDWr4fKxLpvwutT8WBQuX","tlshash":"3023c5e931d5f48107a780e5c42f101bf23e4e36149d64a0e3a2cde979b495de273faa","first_seen":"2026-01-13T13:58:34.511503Z","last_seen":"2026-06-10T03:58:04.114528Z","times_seen":227,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/fonts/proxima-nova-medium.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /fonts/proxima-nova-medium.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/_next/static/chunks/3f37cfb4370f2161.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40815\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"9f6f-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnI0haCBAwe6%2BZ13EgIGgaeBGxG%2BP9g8pXDw8OnKRq6WSK39wU01Ucuoj%2BzA7%2Fhr8WsB5PPVKBSBjeXEM%2F0El1FXa%2FGYwMr%2FaU%2Fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b62b53516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40815,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40815, version 2.983","md5":"a3d44af54306e6e4ba94187e90bf6a1e","sha1":"6ccbf3d9046cacf709ddcdfc29afc7bd2511fa23","sha256":"4bdfd8ae01921037ddbb9b5e4476a33c53f8f5611be018d830e4bd3971dacc26","sha512":"65c9f02f048219acf441e9c6d7f0998251d6c819ef32f6c0fc3a6119e8fa7b84ec212ca1316f8a7b7e0726816f6e0d1b85b0e9b668cf737ca649465fb8ee6185","ssdeep":"768:X+kz65JzOkJzPPJVOGmHDn5WvlrYwoqR44/aC+Doq9euyjkBwNk2Kt2ySVc17ymX:XO5Jqmp4525YO/abH9B5wNkFt2m1PX","tlshash":"1803f1c659173af4a694906460ad4cc2c3cec413fe487a45a3d66b97b2e3dc9a00ec7f","first_seen":"2025-11-04T01:52:48.77717Z","last_seen":"2026-06-16T09:42:30.350264Z","times_seen":228,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/ss/user/support/chats/unread_count","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /ss/user/support/chats/unread_count HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpjahUb1BBcnVP0ACSK70aanQyf3Eto2Vnu5Q8MfWHgahrIW5e7DKVKAVaWciA3qHy21xMUx92LBTdsD%2FARkQeE8WBpv9pEUJC7G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b75b88516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1eb-1f1f7.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1eb-1f1f7.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSv%2F1z30ZpSFjcgEBZivvGdsaCG6pYHhU1jTbv399%2FVyaKK9UYT0egpvuwbPZPV9WXI0%2F6T7XIT1fwL3uwDPy1Nb5VKrxHmC4%2BH61ObYPEtz\"}]}\r\nage: 966\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-10e\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d66d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1a36c711f0ae0ab46c7dce06f63a723","sha1":"5cff6743ac6eed2912288bacd35c363a2d586d18","sha256":"861059eae96aea4c38466209edfad68fbd84ada37bae4ccac92d03011046a524","sha512":"e8d4869bd8d77613770a36de15c23dfade7a3bf3a465c4a6c79be55d9d6660874b5cbb60e631f04964840d3b4d736ceb25f31b30779e8d5ec64023f8e855cdeb","ssdeep":"","tlshash":"f0d02b9dd07de0c448138b703fde31c1418a6326364600dab047272861cc3ef7e40f04","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-06-27T03:44:47.178547Z","times_seen":10637,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/97841cb0243dafee.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/97841cb0243dafee.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"10e6c-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnD24uwyHrtnk9WdRTF8FBbVhdHLddlPPEpGnuZ6sSP2oJq6%2BNTWNVWwQhPTBGl5InlNj0g%2BlVt2A65Q%2Bv1wnuP0yN9CjxeEnHTZ\"}]}\r\ncf-ray: 9d7952a868cf516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69228,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48348)","md5":"2efe6888f929f1e980768e4b486ce707","sha1":"877f47cafd1612f886f3282fb8e38439e06783b9","sha256":"62091c00e253fdc26a7288ff4c673a87b2cb686b06e96a1cb8523b10ba047505","sha512":"79bcd52e6d0e9205993bfe51d0447429aee1f200574e9f5473353a7b6736578aa2eee6e244df354939641bf8dd7db44bba878e7f950041cf4245021141aaed7d","ssdeep":"1536:DQm8KN44hUdGv/I7w2dXeaYYKPILquEasU:UENOuA75uktB","tlshash":"9b6319d97282f060639350ad803f8507b13a7c29140dbd55f2aed8e46e7599ab07bf3b","first_seen":"2026-03-04T16:26:33.00223Z","last_seen":"2026-06-10T03:58:03.963325Z","times_seen":33,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/37bcdd8cbb92bee1.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/37bcdd8cbb92bee1.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"78c-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okG5SNCaTaojJx%2Bndli1KHnmRwmoHGeN4CJ5NWkKGRnYjCRYtnuHV5OH23ymGQIGBUdKhqbQG6m8A8hAZrfY%2BUOd7710FOX8Wk%2B4\"}]}\r\ncf-ray: 9d7952ad699b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1918), with no line terminators","md5":"4bc8257e12e6efd6f13bd4306f0e6641","sha1":"6c686776674307b242c7fd89da354c2686a33b6f","sha256":"9dc7ea545eb3b017d9f4a753779b3ed63895b76c29d643a23c10703e525fdd64","sha512":"4782d1f38fbba246b6f5856abc42b5958727a20f707bb256e008581a9564bd60ef5542d0cc9518922f5202615333d080f5a429e5ec8dceba074ca3c68bc23fa9","ssdeep":"","tlshash":"624154566318316c47b7050862a667dbb73c5124a314c678ce9d852cb3e6ab8c2fe5d2","first_seen":"2026-01-13T13:58:34.46114Z","last_seen":"2026-04-09T01:34:11.92593Z","times_seen":212,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/headphones.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /headphones.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"2e3-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xU2hnd04uRzIarFtBLua8uYSbTveFU1Rf8JXZcjyd8qIxe48dOhwKyuG3OR6WyaXjQHpxIfBmbmhT0AyTi%2BP1z4s3YxD8nzxC%2BK1\"}]}\r\ncf-ray: 9d7952b57b3d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a84f21d87149d80fddb6d68ad10faeb6","sha1":"076cd17cd517cf626d24e393f307f94b3f59a101","sha256":"7b34e17cbaf6a25d779df7f3972ea0a9bcc909a421f25c6dd17b4a11ffd56c54","sha512":"6f58a13e874203c991fe61f5a60bbb3a25145ee8fc37591f1bf2b60345b933312efaeb0a1e809f3af9dd94ba4bd7278637835eb86643b05c8498d65ebff94af9","ssdeep":"","tlshash":"010161fc279491daf1cc8b61605cb0367da674bb4592c005c094dec192d51af824dd92","first_seen":"2026-02-18T18:42:32.397514Z","last_seen":"2026-03-15T20:04:55.028663Z","times_seen":12,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/my-bets?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /my-bets?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KugFqdWGeGi5PHDnVVcLv4bY5Hdv840L87s7ARR0Vmf1FUEjk3GlfyHJ6%2But9xEY7xdTzcg1fe3DTCvHKILIngqPdOXv4Ra6a%2F%2Fu\"}]}\r\ncf-ray: 9d7952c04d1f516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"f0978f5f4772ef4fcb10757060475084","sha1":"7a2f3aa771b8d2c1d8aab5c779d2dd64cb9da54b","sha256":"c2e468eaf55d3fd73b9526bfb11fabe512a34c10f8772593a88381ceb5877a6b","sha512":"7185395e7c6aa6f5176c6f28cd5ffddc4cc20f87d5bdc2c6655673201fa5e6dc4a6fe147dc95d02719b573cea55318d2392e38fec6fe65651c8999762257c531","ssdeep":"","tlshash":"fde042635d1e19b71abf10f0852d9a062986cd3b339855f0c0511d2f3f7632a97cf685","first_seen":"2026-02-18T18:42:32.587516Z","last_seen":"2026-03-15T20:04:55.039482Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2Fsports%2Fsoccer.webp\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2Fsports%2Fsoccer.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11801\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: xWECm65S3F2Yo6LlS-DrXESdVrtvij6FFy1a2nOZw8s\r\ncontent-disposition: attachment; filename=\"soccer.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaGGK40sxGx%2F6TLHq%2B6xI3%2Fy1spuBsOwtsbhL6ocSW2tL%2B8BOW%2B3IjnVsMpFD3DvY2YfXleoIaJfgM%2B6F05HDTa8MKM8Et0ADyg5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfacfc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11801,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7e149fcdcfb7ebd25d6dfa7e27066dc8","sha1":"8ba9bfc2f67be81e1f354eb0411ba5f1efb47245","sha256":"c561029bae52dc5d98a3a2e54be0eb5c449d56bb6f8a3e85172d5ada7399c3cb","sha512":"6752803b4dd5bd6d191c73f4a688d55353bb89fc004486db555b84de7371fd7294e5251c96dabd9932968865ca5dbd15ca0bcd278607b525974d0e8f5da0dc5e","ssdeep":"192:rGGVc7qlBRAeLAuT5Pk8qDeBd3xwcyat0nDjQwzn/EWO3+bRk83AGxK8U:r364BRbLT+8q+jqe8znsWO3+bRksAGxY","tlshash":"0732c0138467b005db3e23768c9851c68b28ed6e50335798fad0e0b8701953bd11ff8d","first_seen":"2026-02-01T14:00:57.602229Z","last_seen":"2026-05-28T13:56:00.619887Z","times_seen":95,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/licenses?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /licenses?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4etcS20Bw73g9DqEARLUUPRhn54NxgSOcG0231oevOxDHzgPaTclUCIPhDLkkUpT2Gywoa5KVn%2Byd1dZCuwCo8VTDUKghrmhHD0E\"}]}\r\ncf-ray: 9d7952c13d44516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2941,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"8314aea9c774dfe584a8eaf2b871224c","sha1":"5fabf96a5a4db5c6cb3c8601b4a078515ef64192","sha256":"f80c99a6bd66e3f41273cc54af99713e0990e530fb2394386fb3c45ad1cda10d","sha512":"65cac1437613d71759398c70ab7e30d9585c04591e3b098f009d9e05f81e99aa1ef40225b9d57ae380ff3f5d150b772e28e0173d9b977a3ac81df14023d9601c","ssdeep":"","tlshash":"cf511e3f8701edde97d6866500ebb34a664c073b9714ac76c4ad0d0c238a22f1f72ba0","first_seen":"2026-03-05T13:04:34.909007Z","last_seen":"2026-03-05T13:04:34.909007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/10a6f40673bc6d45.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/10a6f40673bc6d45.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"14e71-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrNr4evzoK%2FN8ptjN0ly6fkK0t80xLp80hexT68BDdrhC8mbAAloF%2Bu%2BXsvNIYnTQ70urBHhhCrW63wggAE%2B%2B3HrO%2BslqWGiYbP6\"}]}\r\ncf-ray: 9d7952a858c3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85617,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b55536f33f6535c10478ef81aed3c13a","sha1":"b004d2c8050b6ddf653bf1c2ab5bf4b85f01c5db","sha256":"c64703d1e73a9e608c727aaf43c5e8531d2938908641b4b55f8a42407d81b1e1","sha512":"e63ef5680b5832c467ae7ebb1facc410edd29bc9d25161241bb17c3fbec2ee95701400800fe4d9d69d65948e56d79afcdccd47552092c0a1c4329d4d5317895e","ssdeep":"768:hVWDmHlOs82KywJr8EU6KtsdDvdw4puQ1BCbeAvrtmaP8apfG47q6FyX4tN5ualO:Wap54FEK+Dr0fgTua/PCo3lTfqR","tlshash":"d683d6f936d0f8920bab45a6c47f0005f32c4d37245e78a4a3e5ddda316455ee0e2faa","first_seen":"2026-01-13T13:58:34.459189Z","last_seen":"2026-06-10T03:58:04.082101Z","times_seen":228,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/notifications","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/notifications HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGl%2Bxr%2BFqWLu3p3WPjcjeDO1GmsOauRb%2BG0V8m8krutKUxe4A7pyQ8xrL30frtbzWRlzry%2FBtKShtiuFc6B697hiEZaLRWi2%2FNtT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952afea76516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fcasino.webp\u0026w=640\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fcasino.webp\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 38837\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: W9QIIKX-fHk3HXHVZrAK0WBskaZS2TgijruBXmHrCdM\r\ncontent-disposition: attachment; filename=\"casino.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3oSAiGeiK%2FLJ%2F0MdwIgmjVqf43n0YhJiPtCK0XWECpi6Zc40ATDW1qKFii0XQiauQ0eRUFbf0B148URi0nr65pkhXYYiNLVHctc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b7eba5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38837,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2b1b7379472620ad80a16bf34bc4c9c6","sha1":"a1bbfa8ac1dab0f17c6cc14d3411b199516adc4a","sha256":"5bd40820a5fe7c79371d71d566b00ad1606c91a652d938228ebb815e61eb09d3","sha512":"60ef7f57928bd35529e012e1d3648e2f741c28b5b5539521199718f1e551da8dd79a75d3d49fef75c528e8f10edf3dba3c0fce8a53e669340b85b2030df627e8","ssdeep":"768:j25AdtBBZ/5WSoKBQN/N+tGOElAVn6BgR4dHze0OXlN+fNTRYPsJyjNL:jnBAK6N/N/OJ6ZdHziN+fNTRYPI6L","tlshash":"dc03e142f752d012c8537c38a27d86e431df37b45da67d6649462d7a8018dbbfbc8622","first_seen":"2026-02-18T18:42:32.546326Z","last_seen":"2026-05-28T13:56:00.737245Z","times_seen":16,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/home?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /home?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=To%2BzLCh%2Bn26hgAlUpuj0lcC3uilUK6QSCXH1BE5nGOBH58AaOc4%2BJPRdsTwumPtJSntFy85ZWJF6MXouV73tGUCLt8IBxMz5wd%2Fp\"}]}\r\ncf-ray: 9d7952bccc74516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"4ef5ad84e30243dac68140716081e6b1","sha1":"0aa7719ce2aaf9440c041c80312cb8c948630807","sha256":"1484c20c7d8ff4e3886e905361db5312fc006676acfba273c70fb363cdc982c5","sha512":"e8afeddc996665683091737f79870a2ad454c53fa432e3d50610470d3f11a263a0d82e52652164dea01f5b410e67594c210977cbcec41275d10b224ba0f8739d","ssdeep":"","tlshash":"dbd042276d0e15b31abf10f0452d99061996ce3b339819f0c0511d2f3f7632683cf695","first_seen":"2026-02-18T18:42:32.422784Z","last_seen":"2026-03-15T20:04:55.000407Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/d2a1bd5caef79182.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/d2a1bd5caef79182.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"19e5f-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xluRhCBlt5ql4smUrEf02nZpfy8PuOnFU0iQ6xVn0i%2BdZGN%2Bx19hFE7kuB5KFB%2Fm2x4azqmCb%2BHqEEsdM4jSIaWxCRo5PkJRARoO\"}]}\r\ncf-ray: 9d7952a868d8516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106079,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144), with no line terminators","md5":"b12aea6dd2db40075d0537086461e9e8","sha1":"a768f5451909d169607fb11564172a17c1f20772","sha256":"02d449ac0eaedc4335a5416bac75ab54ef34dd5d2a82e6ff6b1e14902907c332","sha512":"db375e4d741e3b8bf84af2509d26a773851e617834e4027260280043e97ec58e3d9255fba49668e7357f3ed8dec972a035cca29bafeb598b2af107d24073620d","ssdeep":"1536:8boZyx9ybUzDtHa1oRMLQY3yhbEWHmsrejXdyrNulW60mX+JAq8dlL35ZT:8boy9Rd6KaLd3jtsijXttOeq8PT","tlshash":"96a3d546ce2e8f173985f7b448d7b38a588886c7ce348a8657f5de9e31498cd608c763","first_seen":"2026-01-13T13:58:34.507356Z","last_seen":"2026-06-10T03:58:03.931793Z","times_seen":223,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/0aaf085a7f1a0239.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/0aaf085a7f1a0239.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"37a-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnTMgTCzWg7JijgTnLVfVjBul%2F03ZxJQw0ljMBBmn9VJoVreIH6K4N9PriUG9FuLv3Ed09x3Z6TTwfrAen7PZtsVmu2G0eBxjngw\"}]}\r\ncf-ray: 9d7952ae8a10516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (890), with no line terminators","md5":"6280fd173e475fb620e7ac1222571eb6","sha1":"07f64e6f4ceb0a0f3449381760971e09744b55ab","sha256":"acd430bf0397e22d565867188fb1373710eb3020e31d68f9e53ac1581d05da5c","sha512":"4728c9b6154b0422f8bdae7e63a6b5e80cadcf272d35b21b4f9e14227c94ca8ce7a47d161eabbfa61e68882f5010c069bfae4e8102f67a771131c3fdb11ca68d","ssdeep":"","tlshash":"4311231e95194a0a0d99c5cc34de662870dced2b4dcb04056ceccb9c32bbf41f1568eb","first_seen":"2026-01-13T13:58:34.4619Z","last_seen":"2026-04-09T01:34:11.946594Z","times_seen":212,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/9644da4208edebf9.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/9644da4208edebf9.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"12081-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMBjGSrwpTBgE%2Bbwrl3e9Al27Xj8J%2FyRaGWp2fLquhFVOjfuvY9XnCpUVJljBpL5RAhZrCPdijvtBQXOp8MySVywunuuy1ert35N\"}]}\r\ncf-ray: 9d7952b58b42516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73857,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36380)","md5":"edfa2e8903e1a70ff7b88ada842b3ac6","sha1":"5c4c7f35fe90ecab56c73666cb4d1c89cfb467bb","sha256":"2669830fc9125adc4eabeadbc297c953b4272b76187c52bef1def4aa0add2f6b","sha512":"8117dc52f82ed7993063ad72cc984c9e095d4d780f19f5b2b8618a854c2e22bc6217c67bdc5950c912d58e2db88b31742e2eee71907ff2f9becd3a657e2b5718","ssdeep":"768:6DHr5myKUyESsjVrzATHIhCcRShYZOBunUxKRZG2AJUyH7Ha2ZNU3yjCDU9Uh3W/:6jr5qm7jVrUTHxcRXZGzJn7B/4N2fn","tlshash":"00733a5b63215eee753e23d6dd6f8e4ca04e29636682d538f7febd4127000c55aa0e83","first_seen":"2026-03-04T16:26:32.948656Z","last_seen":"2026-03-15T20:04:55.063808Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/CasinoNav.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /CasinoNav.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 53660\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"d19c-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:50 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4G%2BnIgK%2FqZ32wvcRBvNvZHJOSHwO4hMyMIDsM3esKD2drB3dKjcidSrnB70JngaXVDdgvgQ05hwqsJhEAbEn%2BkIdlNW6N5VOGWW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b69b68516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 282 x 120, 8-bit/color RGBA, non-interlaced","md5":"fd6ac830e27973772224affad36d68eb","sha1":"a03a7c7396af77e2f6f171c3e2b1d52efd983274","sha256":"3c8f37982f1e5f8fea07257bfc0a9af6a3195cd8ace1d319c9a8403ebf6c2fa5","sha512":"74ac39f51dd3b5f6ba5287072420202b3dcb088319229d52e27aab476990181201d1fe794e496d42a14e1d2440cd249b846012ddeb1ab6d8f53fef23abd61a04","ssdeep":"384:vvbXRQ9UphGFlw3O6ajEoxfqLeOCBYaeyhCOnrPot62:8LFlQO6exSyOeYaBlrK","tlshash":"5952c0312988f4f6c5e1172997b58c2846107b81de804c229fa9abdde7b210b3d7987e","first_seen":"2026-03-05T13:04:34.916394Z","last_seen":"2026-03-05T13:04:34.916394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/pub_bets_by_domain","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/pub_bets_by_domain HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:50 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8eKXo4HrrXXU%2F8IwBl6%2BXrVg3JY0Kke7Tt7gU4FnLhvdrqG2DcnLSJe%2F7z5eQunf3k060ClJr0iZp4X1Yz%2BO97G4y%2BFvtPoFbXJ\"}]}\r\ncf-ray: 9d7952b74b82516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67377,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a22a5cb5eaf9ae590d1c613ead3f08d6","sha1":"70c35bd7b5304315b2a3b1197d0683d1833d1098","sha256":"5a2adbec228f8f31ee95ac681629b9bb775bdf00bd4a0b87a3cb0a03870dd348","sha512":"778687171e1d5b13a03dc828f67347ff60c2e9e88f7f24b16d093d8c56bde7aeaf7f655e1de81be2dda373f1dcf79d0aaed8e563d2c6eb1f59853067065045b9","ssdeep":"1536:qV8zuzMvqzHASk2thvUrw1ScrUeik9o8ohK87UiIzCsAioOdly9:QIYEz","tlshash":"ae63ef2915234ce84fe257c4bd827a0925ec0407ecfeae45d5feaf09d1ecdaa9335909","first_seen":"2026-03-05T13:04:34.918734Z","last_seen":"2026-03-05T13:04:34.918734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_3.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_3.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"4fe76edd8b0be1e2e76e57c247bcc4f0\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FC969192\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6L2mDgwuAtlEj5cy1h8jFAO179Y%2Fk%2BIAEVrKUKY%2FE1%2FHlyOznrsM7aLuILOtLRJphItL4XAE8gET5vrVqKFoq9Uy86it85NaFBzN\"}]}\r\ncf-ray: 9d7952b9cbea516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fe76edd8b0be1e2e76e57c247bcc4f0","sha1":"f2c14ff6cd33058727e79325c349366323020caa","sha256":"e42e9a79fb7b8800ca5532a6eb2fbf9836f99d75b5b571699d74efc2c3916976","sha512":"24afd7ae94da14a024ff82a051902de359a2d6d1d537f0ebace91f1c4c0cf27f1d1fca5d018b46459a677858426d8e0350aa71ff4e58ec5cc72c57bddfe6a084","ssdeep":"","tlshash":"956164f6f2d4f3c1e14ae774d8224432b11f31bd6fafea9682b05fa4a650189858dc00","first_seen":"2026-02-18T18:42:32.456328Z","last_seen":"2026-05-28T13:56:00.78416Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/ss/user/support/chats/unread_count","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:55.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /ss/user/support/chats/unread_count HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncache-control: no-store, no-cache, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKyZcytO4%2FxmQN2jsxDrP7xmlb9RSl0VfLdXUXjGGRSmxiL034IIwNur%2Fdql1bGoM5%2BNQsEJhaORFqH6zw8D8rMifkTLO8Zd4Mhz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952d5bfde516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e06d1ba70f1331e9f9a113cc2f887d3f","sha1":"740b83150add8d2de17b3ab10d33605bb00e9589","sha256":"d089c8a9fc28e4e50223eb38c9409e362521be9380a37341304fbac7a4cd9e5f","sha512":"5a5cb10218016ed858b0b16f4bab706405153b8f6885e520f38c5209b58494cba187825004d82a3425ae661b7a696a646d490f84cb2d0b820f19050ceab21765","ssdeep":"","tlshash":"2060000000000300f000000c03000033c000c03cc30000300c00c000000300c0000c00","first_seen":"2023-04-05T04:24:58Z","last_seen":"2026-06-26T22:33:51.077614Z","times_seen":16275,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/fonts/LemonMilkMedium-mLZYV.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /fonts/LemonMilkMedium-mLZYV.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15664\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"3d30-19b2715ae78\"\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOJiQGfld%2F%2FSn8JbI4de0qOINPRGvBXQYceTE8W8c%2BMKjjSIED40yvwA%2Bn%2FSRDJJtn%2FN9JCwW9UDJjcQ7WN%2FDZbP%2FcXXwWLGeiNW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a848b1516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15664, version 1.0","md5":"29e8a37a85b730f1486a2f1006da40ab","sha1":"9a2398188c9d837067342a92507ebacc38cd74ac","sha256":"6eaff8f74e006352147a30270c11333cde5ae944af8df06fc0e0e6d6a024b579","sha512":"d5c2004b7caa55c6a8a8c816f0edda33ae15b104907397fdbbe5a78c07866738db6a916002572362c584f81f562fd38b1d398ad28a5fd05b8b4d8357a33be1a1","ssdeep":"384:4wcK/SVdYbLKTpMr80tNq78vOqEhLL98SR6OGk+l27k7:4wcK6VSbLB8kq762x7Rpb+l6k7","tlshash":"f462c089e9f99558e2b17a2520f187e7a508c332cb26b5f8f209388455edd1f1c20776","first_seen":"2025-06-23T17:45:24.278891Z","last_seen":"2026-06-10T03:58:03.864194Z","times_seen":232,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/943a283ebf65b52a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/943a283ebf65b52a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"3f6-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCgyKBsdJ8PDjnk%2B%2Fo%2F7ULryBiFvwkmslrmQCvXQ8Xbg5A3ca22JXiAhMbECxovez6n0Wvk5f5gIns3ZsY%2Fyd%2Bl2%2FFzLak%2B1Xkax\"}]}\r\ncf-ray: 9d7952ac897f516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"461d1ce102877eef0868117bd9268262","sha1":"824a289131cdba8a37f93513720cc037b753e6bf","sha256":"e82235c49191583898d3a6171e1f4f58740785bdde62b19b2e574da57ef3af2d","sha512":"20efb0c62beba2376d261cca1aa63e012387c4709d4456ac5f3c59256c996fa2bf8e3eccb7e0a2b5a958b97da579671c5f4b04d4578a73151e8955b166b21729","ssdeep":"","tlshash":"821125d38f298c0c1545d33af089f055ba7ae80a98fa04089be94335317bd79f36ea42","first_seen":"2026-01-13T13:58:34.457884Z","last_seen":"2026-04-09T01:34:11.904265Z","times_seen":212,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/home-casino?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /home-casino?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fkKGpVX6OdRu5ojmdqjJ4t1qqIOJ5gKi%2F%2Fr%2F4OPhkLe6y4Mjj12xiFdI6LL2mrHIXfNeyjM9BervsucS%2Bl8WabhrJExVVf1VGQ3\"}]}\r\ncf-ray: 9d7952b7db9f516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"71d2b69af52f26df5552f54fb98f1149","sha1":"cfa7433c8e41d57dfeaeee7afc406c903f690f00","sha256":"ec0d8f487e97df383c1e1d764b1c704d8b6ef99ea38ccd41798dc9fc79efa0c8","sha512":"4f0661b5b640025e1d9a5a0bfe6b083e7ec0f2f706142d00112a0ef6fd8f0ac07b5931668fefb2ab801b648c3f22e3d5dc8ed20d501696cf2dae2394d0881a9e","ssdeep":"","tlshash":"d3e042235d0e15b71abf10f0852d9a062985dd3b339865f0c0611d2f3f7632693df685","first_seen":"2026-02-18T18:42:32.559406Z","last_seen":"2026-05-28T13:56:00.60124Z","times_seen":16,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_8.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_8.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"03eb67889cdedb47446bebae7f4c3d67\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FD46B9AA\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qt7giC%2Fv9JUaM4lEDAlY7%2Bte5i%2F7APWiouWqWCF2zfXTDIW2cBjQuknrFDuHTBtWRiiul5HvUQGeUcfXqzMXRdDFJ5gOqeDS2Wab\"}]}\r\ncf-ray: 9d7952b9cbef516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03eb67889cdedb47446bebae7f4c3d67","sha1":"fe39de9716946d9fad93fc7bb0fc2beeb824f4b7","sha256":"24324b25d73d5772446a04e5b3dbe9ec114d5e3143a83a18b2e439d0bee5ca1a","sha512":"497723d2140f1316576a08fcf90cffa38ee5c0b3c6380087b92982c6d0c2dc9e3f2dbe80fcd0b8ee5730bb8f3695b55071185659e31dbe2b51e44c8bc8463337","ssdeep":"","tlshash":"f18154d7b7e9f3f02541fba8a1212021b46a30bf7f49e6ccc2c15a609b5a4bd818ec41","first_seen":"2026-02-18T18:42:32.407493Z","last_seen":"2026-05-28T13:56:00.611522Z","times_seen":16,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/vs20rhino.webp","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/vs20rhino.webp HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 235956\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"6ee7755f841193c41450e0d5a2d960e0\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A82389948D\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHrP3q9EvOMqtLt2%2F95bWqY2JUxEHOlOLUlHjkg504kpBIsJN%2BMM%2BwvQiq3C%2BlT8xyeSREqpUfczNgzQZliVqucYJKyS2u6M8f6h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcac68516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":235956,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 360 x 472, 8-bit/color RGB, non-interlaced","md5":"6ee7755f841193c41450e0d5a2d960e0","sha1":"7378cff51e8be3688eaeb6f65b9dd53b55edaad3","sha256":"291f3b0220524092a073d54f5d59dd69d3526cd7fbc99f02c6a65f1c5cc09e4b","sha512":"382a69e08ff3e6bddc90bbe8c91e23c68f866bec7bb4b20ffd1786b9a3a7f2e3c6098e5ba712a656190be1daeecd18c4a603feac619a1393c8a99eb7d1b7cfae","ssdeep":"6144:wB7rRUxM6xELT0aefLzZfU/osM9CodkT1vP51yHsaaz:wBhyxAT0V1ko9LU1vP5Waz","tlshash":"c53423425fc89a93b8c8f21c7aa90ad158bc2fc1d1932099cfd7dac199a41c1675fdf2","first_seen":"2026-02-16T16:09:44.978128Z","last_seen":"2026-03-15T20:04:55.189027Z","times_seen":20,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/aa40970f24e4498b.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/aa40970f24e4498b.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"974-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2B8fAC%2BrbyLhuBFLLycoVrzheiSMik%2F%2FpQUbTU1DTO%2BCLVohz5XD2DGdWvYyoAemmB7x68xxQolniVnc79w4Ncj2WVTislY%2BV7BO\"}]}\r\ncf-ray: 9d7952ad699c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2420,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2398), with no line terminators","md5":"ad701b551106c508d69103e4aa658040","sha1":"8609892225e5269a122aa36fac5454616200aa74","sha256":"bed556e04b1b76fb383cf0c5d5a347813603b9f189367ac18bfad9dadb0a650c","sha512":"2f055e8e240c3654edc880050c81126a1ca3706c3b8884b58796e4aae0b2a0a042d7be913e9a620772fab1fbe74bc1ee7cfd4b393445adb0aa30956647650265","ssdeep":"","tlshash":"4b4197ada6193bbc19374317d74962d1f12a4d38e27b840095cf87783101a39876e7cd","first_seen":"2026-01-13T13:58:34.391511Z","last_seen":"2026-06-10T03:58:03.993879Z","times_seen":227,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3ac6af060d8f1875.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3ac6af060d8f1875.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"129-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ebe54Ak9RtwVNI2gmlfAHl5WwIJErjYE6OVNIiLWcCfgpQmLWRU5o8FsvANUYHuosEAzMac5QRezBGLU2Xx%2FauoGeB226lDHS8Vi\"}]}\r\ncf-ray: 9d7952ae9a13516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"28f8e2b2cf927da287390f7329f7dd4d","sha1":"2ae344339647c5cc33c06beff790a01b60b2d4a9","sha256":"ce46eaa429de0321592363232270431494bfc2661b2bc89f9d10f85f5c596bbf","sha512":"dd71baac3e3f8c119f3025b5da9d13a3fa4de5abba955fb33f32d58cddc0581d50e189f7c660a73885a0d4b5bc64d1acd4f82803c6ebc4016dec5795b29ab1b0","ssdeep":"","tlshash":"29e0c265c459f58820843688687186ee3a192025d5dc245bcaea0bb4a2f5a78808c26c","first_seen":"2026-01-13T13:58:34.523199Z","last_seen":"2026-04-09T01:34:11.900623Z","times_seen":212,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_44.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_44.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"2cc3f2dfd810632f61dcc4183691ef13\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A7FBFC5C7D\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2zI49Fw3XKTLMtct1bWCYyf6EZT%2FIDB2B1%2BZEfuVM4i6gHSaH8%2BjQ781dCAOJZxZSSU7%2F37GV9OAdPMtNaPMwz%2BztiEe%2FfqRhzu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b88bba516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 23, 8-bit/color RGBA, non-interlaced","md5":"2cc3f2dfd810632f61dcc4183691ef13","sha1":"d10a3c13c7d05bda90df70088b88051b6d459c33","sha256":"3f7e6c5fb4718e014fe6ff8b88e3e94cae7e21945879dd19185f9227c8782120","sha512":"498231476832f50d8ee075f83163940cc6efb97b94461a2c6642c7444cbddc6a0e5d6e7b73a96d71b5de8de7c62ee3014023045bcd7d1706eb302ed77117bc7c","ssdeep":"","tlshash":"12f075d6bec40ef60ecb3a17f6c9899c364ab87f5fd24c892c40d521984d6978e02397","first_seen":"2026-02-18T18:42:32.446159Z","last_seen":"2026-05-28T13:56:00.632729Z","times_seen":16,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/home-casino?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /home-casino?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPJWPHL7H4FyDyYQOXKBK5PtrR7EmoHzWnD76eFF7f2m0cQctBfXNHuav3pi6%2F7Pvzjx073aWBRYYvXwqLbSA6atQZWk%2FYRpPb2W\"}]}\r\ncf-ray: 9d7952c0bd32516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"834614f008bbc3b5469ff53e6162fc43","sha1":"add9dac26f9438677a81f697a70648981a5f0f6f","sha256":"2242e5226e23cdc71df945722159f518052fc95c2b57d2c94b5c57961388948e","sha512":"d8ffab9b8043c32c3ba9f38ffa9229c3410171a32d2b58efeefaaf300b75044c49fe99ce8893bdd6d2defb6fa112263b1b5891914c7d5cf41d8b5939b1bd2605","ssdeep":"","tlshash":"b1511f3f8700edee57d7466504ebb24a664c473b8744ac66c4dd0d0c238622f2f35ba1","first_seen":"2026-03-05T13:04:34.924933Z","last_seen":"2026-03-05T13:04:34.924933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/betting/pub_bets_by_domain","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:54.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/betting/pub_bets_by_domain HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:54 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:53 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FCF7nbL9gv5pLBV8C00cVQhAYJ5yhNpv4qmBBOM8vBm2WYzeOWxiY3%2BHGcEnPJ5sQGr9%2BjsXzMZvGb7YPJ5sUOqb6moAb72sVT1\"}]}\r\ncf-ray: 9d7952ccaefc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67397,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ec6029f8a29fb29e4c1d39eeeb41e377","sha1":"b7cc325f06cb8154021016bb25d2e347ad115c2e","sha256":"e92e3ce57c57bf78279734f2c17a484d9756f9d864f70a4ad9e5f39efe25c3ee","sha512":"fdbcb9d3ccf852e1c17d65a2cd0518e84ee05136e60580684925c80d956f98a4ea97e185713cc159355aabedee4563d73c150b184d0a9b2d76f6ca9693d69ae8","ssdeep":"1536:HzuzMvqzHASk2thvUrw1ScrUeik9o8ohK87UiIzCsAioOdlyDR:jYEr","tlshash":"1563ef2915234ce84fe257c4bd827a0925ec0407ecfeae45d5feaf09d1ecdaa9335909","first_seen":"2026-03-05T13:04:34.926702Z","last_seen":"2026-03-05T13:04:34.926702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/assets/homePage/bestChoice/logo.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /assets/homePage/bestChoice/logo.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 16 Dec 2025 12:14:51 GMT\r\netag: W/\"e05-19b2715ae78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGIgMj9e1zk6ZfZjHwYO9b8m%2Fh8AoYx7arRoajBGMsJpm7u90iHMVq2k6sTMlOvGPQXn6hx3cXzsuS7FluUNV8IpuLsiY%2BC3Qpzy\"}]}\r\ncf-ray: 9d7952a848b5516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d463307224bbf1e821b1a38b65fa0269","sha1":"98c13ae050591c19768fc5dd32a6fbc9038e3cd1","sha256":"5163f65b0d9b8b660d5fef6aafceb1c6264cbfed84b637da9e78e86a3a9a6910","sha512":"a9116506d381fa3eb52f4446408b1e4fb8ce00dc004bf58b29c96ec41dcb5eb57c31c5bfa3395e7455ab87ae53fcfae97950b98b5d946684cb4a839aafb0b740","ssdeep":"","tlshash":"647188fa53c8b6d0e507ebf0cd3614346a5b28febf55c28549aaade9e53144d8c9cc80","first_seen":"2026-01-13T13:58:34.43113Z","last_seen":"2026-06-10T03:58:04.086991Z","times_seen":228,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/accf940692610c13.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/accf940692610c13.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"e1d4-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBiD%2BRMcsN%2BZSMkRgejsKO7tlx9VrvTxPMwrZDTZKOgkJH5o5rx4vony2Ck4cViBnZnQer4F0LDBEb43LSmgDuI0%2Fdd7qRQNPOch\"}]}\r\ncf-ray: 9d7952a858cc516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57812,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57812), with no line terminators","md5":"f54304db04496433b07beb8a07dedc37","sha1":"cae2db299cf5a780628c4ad2e2ae7b42ea572b14","sha256":"326afce1783fe02a70e68e44b20ab8c17d0bf08bc418d4dfea8b5eadb2198107","sha512":"3de05ed81a6cf07b61208850d7b3d6b9aa68fc506bafccd75144cbc18ee480f7014b35d2a7ae9f299490e501315b31a2a4c3a868ee6ae03dc03ffa03510b8878","ssdeep":"768:cdZfa4VxZhTD84cS6a9UkVBEydFszwiKrZRpTy8Y3GJnwxGis/0K5FaNDMQoawx:caQ7h36nlKZRRyh+wxRcLWBNwx","tlshash":"194319c577a1b02243a751e9445f140bf27dea39984c0868f251e8f728b5a8d86fff78","first_seen":"2026-02-12T20:36:03.631901Z","last_seen":"2026-05-09T07:37:36.90707Z","times_seen":53,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f27400af9f76e77b.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/f27400af9f76e77b.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"cf14-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GigcJ3%2BOoZqKF48Qk8RtVHqrx8ULAarOm9JKcT%2BWDNruPheMZgXmZBAJy3r7QN58PK%2BtDjpFVspbGdfFQBPZirbWZQNrdhizFO73\"}]}\r\ncf-ray: 9d7952a868d4516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53012,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46873)","md5":"003f8a3965dd4ced7a6ec212f73491f1","sha1":"0c4a0108df085fe9075a9518af64d70510ef9875","sha256":"e4ea5fd724b5834f0304d20cadf1d8609be15e46626c234cc6659ec302e05c60","sha512":"7ede1fbf78b8902ac70db752613abeff64bade0a66c5580c4795d76da3d10597aaa3ab87e978965eee95cf57e86a75f91a28f5ee08a821a8acbb096b7998aa49","ssdeep":"1536:qYjNT5zCLctDGPP6byEZjwouu8r0x9kn7k1u5:xjfzCiDGwyEGopGd5","tlshash":"b933e79061556aacf6570195b56fd00cb02ebeacce0bc418b7bc3c792a148c4bad6fd7","first_seen":"2026-03-04T16:26:32.919048Z","last_seen":"2026-04-09T01:34:11.855794Z","times_seen":17,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/russianmachineneverbreaks.com/wp-content/uploads/2026/03/kurly-caps-mammoth.jpg?fit=1200%2C904\u0026ssl=1\u0026original","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /russianmachineneverbreaks.com/wp-content/uploads/2026/03/kurly-caps-mammoth.jpg?fit=1200%2C904\u0026ssl=1\u0026original HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92812\r\nlast-modified: Wed, 04 Mar 2026 03:18:10 GMT\r\nexpires: Fri, 03 Mar 2028 15:18:10 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://russianmachineneverbreaks.com/wp-content/uploads/2026/03/kurly-caps-mammoth.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"08532907225cd4a0\"\r\nx-bytes-saved: 108462\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x904, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ec55d723b88163ebe037393da509ba5","sha1":"3f7c8735f67c7f9bf4441fa5b2b1c9648f773845","sha256":"e0c8ae0e3d3bece1bb49cfb04ab26d74b63aecd6b8e916ff798dad9ec5494f7b","sha512":"4dd3e3f21ccfb1d3e994d7ee309cfc0d49d4d929f093392fa8bfff24dc7118f45ea6a309ee687eed24b46692e2d0eb1c101319bd6b2d8f06c846eb394deba57f","ssdeep":"1536:23QnAUsRbL+xn0VS8EOnjtaiVwcjqHNmfrSchnPJJqqPNv/guF5+IQ1pUGd:23QAUsVSZ0U0njtzVwrtmffPJJqyNngr","tlshash":"059302faa144c8d2e0ed342f921a252ed0c4ed27b84b9277f03454ce56256aee0ad45f","first_seen":"2026-03-05T13:04:34.93012Z","last_seen":"2026-03-05T13:04:34.93012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":37,"dns":1,"connect":7,"send":0,"wait":12,"receive":21,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1ff-1f1e6.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1ff-1f1e6.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMWLYqF2gy4CEgc%2BQqszYYf2alQKnln5KRqE8VGP7M7MkDsN0GAememE8mQ25lzu5X%2BQVyXG2lDK2TNMDrCeAVr82jWOBswMiHgA%2B7IGEoHR\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68e4161d-25f\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be9d89d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfc4e3aad2ba71c04041c2e69409e98e","sha1":"1fdd78a78d9596b0a8b0c1732108e43feb32e859","sha256":"e8709441112010abea2220d592fe23a58f9498d985971cc65b719e7597e3dc9d","sha512":"62291fdf3551d26b953cb57337d2178b0593cb9749fe826c9a5b9d9b49841c1269cf5552f64ad9b8767abadcc576bde94887f18244792b4ece4380f64feef4a1","ssdeep":"","tlshash":"c8f0acddb3baaa005c5f93718ffd39c1808164ed254849c8702e9621558b3cfbcc8940","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-06-26T22:28:12.852468Z","times_seen":472,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":49,"dns":0,"connect":16,"send":0,"wait":379,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1e9-1f1ea.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1e9-1f1ea.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2Fw6UOVCbeol00H5Ovt2dYLQJEiVldSLlc7r8IchEsG1JBM5GVD4ybwl6D%2BW9rv5m6jl%2BTBJ57hAxSQ9qNnrX7FiA0PXnkvF62jFGqoHUGS7\"}]}\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e4161d-10f\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d68d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"939afd91bea7074f84f4a328ca095295","sha1":"1a8edb7520cb812fd35996134ae823fe8ade03d9","sha256":"8e3c8f938c6fc4fc97c81f398a71d0d789b44b6be458469d7056372a2c05837a","sha512":"a3922e78b9ac5209cabea2c0945d474d24035a4e78297b3105779cea945b931ae83a59ffbf73e2877f2da42e0ff7fb5f23c297c1d7f7d09da3644ed63d82ef6c","ssdeep":"","tlshash":"c7d02bd8506ae8c04d16c7603e6c32c1288a6259238800dff0835338a6cb7ceb745f50","first_seen":"2023-07-03T07:07:12Z","last_seen":"2026-06-27T03:44:47.201895Z","times_seen":10627,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/14d0b6b938188579.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/14d0b6b938188579.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"38675b-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVU5%2FZ2gU%2BxDduyrvAQAiftvnwaawQpdiWpL3srwAWbkkdvpvoMg47eNQQRY41iQX6rkMRTOWq8suY780sLqt0lOjFlmNv7%2BWvbu\"}]}\r\ncf-ray: 9d7952a868d0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3696475,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"515211701ee81ce2ce33b37a7ab6d285","sha1":"cdf692c8bdfbb487ca3c0b232bf32ef271f2e3d1","sha256":"df10c6e9d571c0fce19fcd0f38ab6b65bab99a94be182fd395019ae765e1a455","sha512":"e8f31935e8edf02d7a693434e9ff2d08957b301dc05d03ccab06d5fe9fcdf231fb7380cfdb3a7d7181648dd81f3c302a96259555e3974cdbe1ecb8b8bc19be52","ssdeep":"24576:mKX1EFvFoa99SnQo+a7yJ35K5SX3/KbrrPcvIHBr99v:gxe+YrP/F","tlshash":"272502f59fc9afe0a70ec7a4d0ee24c82c7e2ffb6a5946c8d3d51c5161150c868c9e82","first_seen":"2026-02-12T20:36:03.630956Z","last_seen":"2026-04-09T01:34:11.923062Z","times_seen":41,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/d9e6e3ebb90c165a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/d9e6e3ebb90c165a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"709-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGmGHIEVhz5BoNiz7pxXALI97gqHuIv%2BoDZIigYacNxID4IYjNWlJCyK1zScG7ZJpT%2B1v9F7Qkgv33caaElabx21qcpA990fPEzh\"}]}\r\ncf-ray: 9d7952abc95b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1788), with no line terminators","md5":"9d54e3d679627817f137bb46cc910456","sha1":"813eebe75fbb4ba1a51e02d1bc841ea389750020","sha256":"180d95eaf15582acb3975951ade6b15df0b1b710e537e61b02866b0a9ed5eb4f","sha512":"d546d0400933ce1b79826156420e6476d6e112346a8d9942ffe4557fb06fad7ac9b1a5f208b5bb3f87de0f77f90b332f5e4b925fe3a8a92e1a027992ab214507","ssdeep":"","tlshash":"a131a70e5318572d45a2e19a3fb7298fa3391122138ac054f998467d32667ecc2326fc","first_seen":"2026-01-13T13:58:34.47663Z","last_seen":"2026-04-27T08:35:58.66008Z","times_seen":216,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/profile/geo","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/profile/geo HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXcfqtFU1pu9tFBQSgwFqbPtQz231u13VbFYKWBGxznCkh22z5aNCJnpG5wPPLuhif3mXmQGTZc89%2B9KY94TQRcPB5F4yxK4xnJP\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:48 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952afea75516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"542122b04fda568516d89e55d6c36120","sha1":"6e28c2bcce9430899f90cd4cb8c54459918e2c0f","sha256":"d77a18a735b5cef136d19ac34ff02534a18bc96127e2d665d886ddbf47cdb323","sha512":"f2532b01e1668c855c3b0430338061bcf8adf13b67968335bf1abefe17f3ce3ffe3fecd97452de655a18aa1de27103f84f84db53b332b7e05d0fe5f5f895d3d1","ssdeep":"","tlshash":"6b60000000000c0c00c000c003c0030300033c33f333300cc0f0000030ff0000000000","first_seen":"2025-04-23T11:56:57.670009Z","last_seen":"2026-06-23T20:43:15.279917Z","times_seen":244,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/sportex/sport_icon_9.svg","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/sportex/sport_icon_9.svg HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"5d6378aed154411c43ffa4ce5fa77378\"\r\nlast-modified: Sun, 01 Feb 2026 07:05:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A800328B6B\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5RHDbvj0UNMTVFNwop4Ic%2BpHmmsosItYLV0tvhiY7WG0FJUuX2%2FuMhaKudFvugcyUS55x8FdNGV4wHXRET3zGJP7xBjOkpn7W90\"}]}\r\ncf-ray: 9d7952b9cbf0516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1425,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d6378aed154411c43ffa4ce5fa77378","sha1":"a87e120006b748b90c98aaa5e1968e13268da019","sha256":"63e20d15be0ed799c7c5c7e846983a9323e73dd419fbd43107c1d3c6266da1b9","sha512":"3dbb45adf5ef295e4dfb3c66b19ea6eb59eb819f1dcfa21358783acb8bd08aeda25d4aa536b3aaae4fb645d7c19b63d8dbaf3762e710c3a3d1bffad6932eaeaf","ssdeep":"","tlshash":"2821edf7e3d936e0e402e3b1901799663aab10ff7708cf898390ad80b60059b98ccc84","first_seen":"2026-02-18T18:42:32.495179Z","last_seen":"2026-05-28T13:56:00.630372Z","times_seen":16,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/licenses?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /licenses?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DI8r0b8N5rSVrIYkjOroJIUo%2FOdl9KXO%2BJTvIxSi862nBpVag08c%2FLojbnlpO7Wo4pqVxwR8e084gQiPWotCZdH8esAsEpXcWV6W\"}]}\r\ncf-ray: 9d7952bcdc77516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"91c0d12bced5e7af5cd57bf400d62426","sha1":"8eb2c36368436fa5a8531587d320635e36896a7c","sha256":"348346344ea018ba7fed16385a44f85218fc8696d357040ae0d39e682c4cac46","sha512":"fdf8a1061a7587458e68dba0fc858abbfb295c6b94925f52de2f5b037d63dbee16a1a193595fd54d32e098013700d5e7264b769d14d5dbd14678e284f8bfbc36","ssdeep":"","tlshash":"6ce02d231d0e19b31abf10f0892d9a0a2986ce3b239855f0c0611d2f3f7632a97cf685","first_seen":"2026-02-18T18:42:32.3696Z","last_seen":"2026-03-15T20:04:55.138081Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/free-spins?_rsc=3hd5j","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /free-spins?_rsc=3hd5j HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /home\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkF4F5qHkMDZsuTJ96DBa%2FzqZefJVqMqdqFiaIsqvwZwNoJKw0FJMu6Knl09LN2rR1sTZz0xVMwGUS6GS7xEk5%2BPrrxap6OgpJBg\"}]}\r\ncf-ray: 9d7952bfed0e516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3d747f604b0dd209eed5d830730c126b","sha1":"dca6d389309e2d6e5b44f855b683ae0c921d3f47","sha256":"75b83e6d23e9f124fba9e3174173859aa4c5e64d78d764139b93388d6c79b354","sha512":"3554ebebbe45647c8403120649325c8ffc150a0ab03b7e465f5a6db280d21055975590d03979ec2542291301409bbc649d14befecc37a9d9bc869d29215617b5","ssdeep":"","tlshash":"ffe042231d1e15b31abf10f0852d9a06298add3b339895f1c0611d2f3f7632693df685","first_seen":"2026-02-18T18:42:32.506925Z","last_seen":"2026-03-15T20:04:55.076443Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/e0e9b5475e499cfa.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/e0e9b5475e499cfa.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"89ee-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXezXXHXM6XbDCAyqU%2F8B0Srn3GZFwxGOR5Rnp2%2FRi2YbGcm0TXfGbp63PD%2FXlJ5AJmflU8fsYVNI%2B8k0TaFzYzbQhSXQr0leMgg\"}]}\r\ncf-ray: 9d7952b24acd516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35310,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35294), with no line terminators","md5":"41e0821ff365695cd3fb425fa2397a04","sha1":"54a3ff065fa647f12b34903c79cf249e17738ddb","sha256":"5f0508e16fb7d459650d9137fb1cfa77960024654903ddff15dc7639af8a1194","sha512":"1d13ab08c045b72b8089c04cc774b2e2e1e1e6c087c85543e1f83c1fb2faa639d8446809019265935db2c71d3250b47e1fe11e9c5a4a67d7f4cbd033e95827c0","ssdeep":"384:MOfF6+el4eTGrk8vX+cDPh7fHMn4nO0PWzZIBnTi2VwhRvPa5GpZ:rI+xvLPRMn4n3nTruEeZ","tlshash":"bbf28325a0247ef9b71604a4b96e818c302ebf58cd5f9a94b2fc7c1a17448c07e97bd7","first_seen":"2026-02-02T18:35:49.630693Z","last_seen":"2026-03-15T20:04:55.024349Z","times_seen":14,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/s3/casinoicon/plinko_x4_v.png","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /s3/casinoicon/plinko_x4_v.png HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 470297\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: \"aeea3b837bfafde6331b7daa35c12a66\"\r\nlast-modified: Sun, 01 Feb 2026 06:52:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1899F3A821CE3218\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 17767\r\nx-ratelimit-remaining: 17767\r\nx-xss-protection: 1; mode=block\r\nexpires: Fri, 05 Mar 2027 13:03:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWLvkL8BWSjBsg3r1YOSKIJX7VNNB5ZoVx3ck4V32pt5Bitrue8oVp5yWCAIH4Waxl%2FR2uPmjtKP2GDMCNWEvrj1NPSmJsIjiEU2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bcac62516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 796, 8-bit/color RGBA, non-interlaced","md5":"aeea3b837bfafde6331b7daa35c12a66","sha1":"0f8d0333c5b75610344a3e80b0eeee26742666b2","sha256":"0590e837cfbe9239c03319696575cb6f257a10ab12e851639e60b12a027bb804","sha512":"596dd9c57a0954579480751532b618181af9528a740b3ef45a98e9f7507908df5c6e7bfa7db79b929b5d431a970a7231ee78cc888219386c76b8eb30620305ae","ssdeep":"12288:HyWDSZM1h31k9Wpcvum+LZpqn8pO2p+aRxgwsQk6RCik:Hy9+1QscvrmjqnAO2pHewbk6RCik","tlshash":"5ba42356f89a881f93e7e4a9b128c01db37d195ba79d13331874ff7edb82569a01200f","first_seen":"2026-01-30T07:25:16.168354Z","last_seen":"2026-04-28T18:07:01.644651Z","times_seen":172,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1fc.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1fc.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6%2BettSVU6Vke%2FoCrZdtN%2FdhrFFPUeJZRysaY8leZwyKjC2oiN%2FIADU99DzJQJoxzs4HJsvdbuvB3J0YBgnzGQfhgIg%2F903wZRI97JKc%2Bo%2Bt\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68e4161d-2cf\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be9d7dd9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":719,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e6ce569cc1d4e3c2bb19400e8bbedb6","sha1":"fb4dbc8882a8fee78c73b1a6ddefba87e044d777","sha256":"9160df0e3d0c1bca2c30fa5f5c0ff4a19a99ab5e86e84f0d4dbc400680d2496f","sha512":"8511550d894e1d6687180912fa9d7e17a9287bd416217608c7d46fcb3db239995f05ce8d342620fc11c90e5f8df2f66fd00ebe52ac5397b16e3686742448a05b","ssdeep":"","tlshash":"39019cdba349e0d10ad9cfa85e147ec9260972f3187228c261439d18d5976de7156e40","first_seen":"2026-01-13T06:23:53.76093Z","last_seen":"2026-06-24T15:51:02.452804Z","times_seen":15,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":53,"dns":1,"connect":10,"send":0,"wait":387,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/sport?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /sport?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irqX24fLaHhYPHNkJ0GJLGor4caROFlKGcEt1s0UFp7202WzLC5nVAG0alzTJeAiZaicdfLWCLN81MWJizn9Ag%2BDJiXhp5iSWnHe\"}]}\r\ncf-ray: 9d7952c0bd33516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"98286008f2087ee2d7cbe2e93babea14","sha1":"2df22f964a1caedfa14de60ce6b5868593357053","sha256":"a95603edad69b98d2bfa1358e40a9e02274e918f67a77892bbb0d5c9882595e4","sha512":"bdf9741f6d2cfd66df63f96d2cc5cca557b7186c0c306864ee12dc553fe7ca8f43d3b0b81c2952cfffae87a34196a801fc0aee6eeb06906708de5444d09b7c53","ssdeep":"","tlshash":"66510f3f8701edde97d6866900ebb34a664c473b5754ac6ac4dd4d0c238a22f1f71ba1","first_seen":"2026-03-05T13:04:34.938638Z","last_seen":"2026-03-05T13:04:34.938638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/affiliate-overview?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /affiliate-overview?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrSHKC1R2a6D7tlPYXAB9%2BZmb3aqCwJ9HC0c%2BbE5COMxzmhEZXipqkUhYdYWFK2uscA1nVnTOpG6P%2BnxgrAnbqPY3g8QfQzCh7mL\"}]}\r\ncf-ray: 9d7952c13d46516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"974aa50f278edc7bed997f0d8e16ec46","sha1":"bf1831b0513094a0aab1ffc8696385fd4516bbb6","sha256":"ad253e951813b4c86da379d16f2e3c5578ed5865ec556cb7a4ea992f100fed29","sha512":"f7c1d5f22c72f817d975ae75c123e7c6464776d0224b002e436bebf7b87598a006feb010bedc5bc79fe6694cb9d7dee8eecd19391656f12b2b885a388056dd8e","ssdeep":"","tlshash":"96510e3f8701edde57d7866500ebb24a664c473b8b54ac7684ad4d4c238a22f1f31ba1","first_seen":"2026-03-05T13:04:34.940341Z","last_seen":"2026-03-05T13:04:34.940341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/20fc3cebcca07a0f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/20fc3cebcca07a0f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"7d11-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jx7ot1eF%2FG%2BGHk7rHK%2BOz%2Bsy2iHyXo%2F2iQ%2Fb6XbYJvRlBULRGVCJXg4TKkWjEmMpsxnV6NbbK%2BysXVTGId7S6K%2B%2BYD3Ru1ikaPQZ\"}]}\r\ncf-ray: 9d7952b11aae516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32017,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32009), with no line terminators","md5":"7fd180cf72e774d113a37f469f1b13f4","sha1":"ac8d3e2f0c06540fc18fc98e229af863d6209b2b","sha256":"5c11ab40ef3aa48c6e96a6eda4cecd23556e87ffff1e9010308ddb12c70f1252","sha512":"f67e49f324ecc6a55cbf798a5b097a945bd843622cbfde7bf6ca58046033c27bae8668fbc8c134fd95d93759ea7da115c9c70043c06ab0dfe98314be56b6066a","ssdeep":"768:hbEe+KZaqYIv59w7varlkGYgOvJQj3KlDo6mlZsZiISnD3djM:3+KZae5aallYgOvJQj3CDo6mlZsZiISa","tlshash":"82e219ab3111f47246ff51aac02f1b097238119e570c84ac793daeed26b0e656397f39","first_seen":"2026-03-04T16:26:32.834645Z","last_seen":"2026-03-15T20:04:55.107387Z","times_seen":7,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/56604a82a993fe8f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/56604a82a993fe8f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"722-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tie2d4ilM5ilmt3QTot3uLvK5A0qtyISz0Xcv%2BavqIBHPbrSvaphKXI5cbvaMY7MqCE07Jto67Z%2BhQ8TWPjIpF0VxwA7Ppv7XnQ\"}]}\r\ncf-ray: 9d7952abb954516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1825), with no line terminators","md5":"9eb6e3c929df6cbe6bb340a68a27a591","sha1":"46c44cd8619a39864e91c811fbf91c6fa9270d7e","sha256":"904c4dc09a88fd81921baf9cd2fd908e73b62d1f6716c6795f5b0b6cde73ca8d","sha512":"141360b9ac89324ddb713a8950ef2b1a4b604f72a0bae0a182d4760f9fc2b5c861dd7e890b3a6ba858d4b1cf3edbb907698707f88b3c2035db1ecd5b5ee08928","ssdeep":"","tlshash":"4631a50e2614a97a4b40027a398bea4670fc24c50577bc14e9fd434c13a87bc72a186e","first_seen":"2026-02-12T20:36:03.635175Z","last_seen":"2026-04-09T01:34:11.911881Z","times_seen":41,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/80b5b3a83e5835e5.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/80b5b3a83e5835e5.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"1f2-19cb66cc6a0\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BoWkAAVUdPRPXsiQRWzBY%2FlmvlYIhFpRg0KhopWcBCPebf61G7RheSMisEJY86OewSpDD%2BWZkgzoTkquRKIw4pqHSuJ7IkUU7O5g\"}]}\r\ncf-ray: 9d7952ac9981516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (498), with no line terminators","md5":"2a6332fd46de048523a45e2e63e85044","sha1":"ddafe71e7f76a02674a9a17287b68cd3d3a5f820","sha256":"71691e84d74b6c6ab66b2d6091bcea6aecba5f7d38d46c9d4385299f81b83d71","sha512":"002f7188f6b9b2d7eb2d8994c84c81f835de272fe012c59c2319aa30821a5693295159d1ce722cea98d17d19e538eca4dea76d3dde40165fcf16bbff41999956","ssdeep":"","tlshash":"90f0dca7f50d88e408c472197821633f3ad01af155ab9673c2ae4abc4bb7f5478c6455","first_seen":"2026-02-12T20:36:03.611852Z","last_seen":"2026-04-09T01:34:11.895562Z","times_seen":41,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f7465db492e6b331.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/f7465db492e6b331.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"4813-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ry0xw364CX5giGYBGBHs2VpC7q%2BqYzUrQLH40q9SgGGxKMGl%2B8cqUfHwKsqkGPIJMeFwtVj%2FABjdZVW6FylMqBfsw7caZP7wWX4W\"}]}\r\ncf-ray: 9d7952b58b40516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18451,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18451), with no line terminators","md5":"068cbd1460639fe52fd985eb1332abb0","sha1":"0331a048e43d60a4734bfa03da0c6910abae6a8d","sha256":"d9441187b773b5079a46cbfce0184910c03419db00764cebb77fdaa86f45c015","sha512":"8218736bf1159c112a8651fa2e635b8016f9e177b247ee58842749176ff175cfe9e7abb9aea2d20fb43ca32975945fe51900d6a86079d757f9cca7109015d9ee","ssdeep":"384:nRVsrrjRG2RR7EE9Ci/ismVOo1hfqxPCz6f:n3IrjBR+E9CiK+ozfqd9f","tlshash":"208298d8b292b06156439425853f120ff23f7818614e5458f2b9e8e26e78f8d216bf7f","first_seen":"2026-03-04T16:26:32.842746Z","last_seen":"2026-03-15T20:04:54.994696Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/new_casino/games_by_category?category=Minigames\u0026limit=30","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/new_casino/games_by_category?category=Minigames\u0026limit=30 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:50 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tq2MsbGbStUEzxS7xj2pjKjAMVTz25yzt8F54Fi2eMjWJKsb1RKVKrXFuNUUbpkcnM43g%2F8slVFhEEzUhm2yftlC4W%2BOqs2fZ4w%2B\"}]}\r\ncf-ray: 9d7952b7fba7516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55e3e610ca4ff79752ea17fcc606d83","sha1":"b38ae15f507db1c0997b7559cf52e556f58a6af6","sha256":"fccc59ea4cbbce876d031d9988979f604830d3c6e4bce7c4fe2eee11d9df0d24","sha512":"ba60bc0f837272f31af648e7d7a8cc7cd8efda56752d73a6ab6c3d981548e439754703efeeda92ee07da76b2718642a3635659e79d4f292025343f81349ad1af","ssdeep":"","tlshash":"5b213e678b2cd9fac71c2b103e7ba18ae441755adfc4da56c47fcd20caad056033a170","first_seen":"2026-03-05T13:04:34.943486Z","last_seen":"2026-03-05T13:35:40.242257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/c6203b83c56e0c81.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/c6203b83c56e0c81.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"6a35-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQV%2BNmUp%2FWL8gM1bMb06%2Fz%2BJZCbovAHysl%2FYhwlcIRRS6ZW3sN%2BlVNMs8%2F2UK6vw1nFPRpuEbmiyzLAATyXZJ5rpLDk0Tx1dG0KR\"}]}\r\ncf-ray: 9d7952a858c9516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27189,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26848)","md5":"4cfa54e00756617f44fcfb4644113094","sha1":"bad52dae55ea9de7a37403d3a97d11127dedcd42","sha256":"933dd7d7a0166c7215c196999f4aa8c4cb9dab904e4fdb2877d19fa9cf5f4ff1","sha512":"889515d899a980ea190dc142de65f3b5059703fba2f1522e8060660306b2e317e8ff7f5248ec4ab3a7511e68af04a479ebb7ff0aa6272bb75fb958a8bdc15bd6","ssdeep":"384:XyeMIscbzoieVdDEAjyqGzXkG9IsjbOzx4BWJUs:XlIdwDkcpbax5j","tlshash":"29c2f8a5b582f8a0abc340ed407f4509b1366d1800adf470f2e5d4e572fe989a1b7bb7","first_seen":"2026-03-04T16:26:32.828773Z","last_seen":"2026-04-09T01:34:11.945656Z","times_seen":17,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fcricket.webp\u0026w=256\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FtopSports%2FtopSportsDesc%2Fcricket.webp\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9424\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: Cuuvp_x1QU8JV1qn9u2c6q87_xnEJ_JQlmgbMZEReos\r\ncontent-disposition: attachment; filename=\"cricket.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvctatgDGBFRt2wS4ivitY70eHwQc561fUoSJztYslMCym2KbMtAYZuhT8BPufUUuhCc3H2nB4cYP%2B3%2FXdaxT1JnI9yFFFB0fWuy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952bfacff516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9424,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3eb5f159bebeb426efdda5d198ff636a","sha1":"b1945f31af55e950a8056b5adb643e77cd94eae2","sha256":"0aebafa7fc75414f09575aa7f6ed9ceaaf3bff19c427f25096681b3191117a8b","sha512":"d5a1370599deef89f3b29913e8934a343223753c5a9ff08a682a02200a83c00d9c3002a874df3458e41a2344fb7362251fe420fa8d3b7607ced7a057cb5a15bc","ssdeep":"192:rGCkcFp+5+mmnYfZ3v5viVlu5ZArOS95V87Tq6TqEX3MELugudHCJqTD89X4Lq0o:rxxmmnYfZ3v4lV95x6TqzFgudiJuc","tlshash":"4d12c0920b0dc620f31ac134e1575e5285fde6d02c8e4c567e09347cb53b3bb694d275","first_seen":"2026-01-13T13:58:34.434649Z","last_seen":"2026-05-28T13:56:00.696154Z","times_seen":209,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/home?_rsc=dt7rl","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /home?_rsc=dt7rl HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/home\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /home\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUuTYgqTMxooCoBhMurL80IPOmz96DV8wBazUVQ7lwIOK0YOjdGwLnYmXz5nOOZdx4V%2FeghW0q4nJhmUXJ8%2BEJSJJ8HuL4h2nT2C\"}]}\r\ncf-ray: 9d7952c0bd34516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2936,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2020)","md5":"31701eb8b93f8a0d938fb459a968fc68","sha1":"66c81891ed9825faa981e30fcf1ab9ce3a9accb5","sha256":"274718b7d1ece756df622e881d4705061f4a39ada6c5dd68325aa73f54e45a62","sha512":"8f8c6b35577b0eea38d82d0acd8d1f3f5ec68e3a5f8e8abe1da900e32c45c5be3a825d3f5846ad455008316167b1fa5fd17ac19c21732bcbecb73f47b09f7d9c","ssdeep":"","tlshash":"3051003f8711edde57db866500ebb249668c473b97549c6a849d4d0c238a22f1f31ba1","first_seen":"2026-03-05T13:04:34.94644Z","last_seen":"2026-03-05T13:04:34.94644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/home?_rsc=18cpn","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /home?_rsc=18cpn HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(loginLayout)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXly%2FynXfFx2zR%2FIZRrUeedqbbvrGaXrG1eZCsJiGMmuwguHLi0RsIoCGeCwZ5sAprf%2Fvcrl2C9CXQGmdmmQnruvl3jfkz0O96Tr\"}]}\r\ncf-ray: 9d7952b0caa1516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9090,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4176)","md5":"28980048652305feff7e3c951c11fc01","sha1":"e61bea3ab202c39dca24eed180092395940df9d9","sha256":"707b5d3ce887e1036db971ec5422b78a742f2657f270b147413f0abdfd5ee03c","sha512":"824cf0b2d78d86c28adc22a631b2836b71dbc9c8e5e5830d8d370e3439b0c0977c8df8e2e56b8351bf423da05738ef4bd0172767a7367d0aae62179f3f4a9994","ssdeep":"96:hVO1/QUrULXXzlfUHDAz/kM/VN9epbPM+cU5R/7mJRLI7/8aU+ssDJF:hVO1/gbJIAz/HNN9aM+t5URM8aZssDv","tlshash":"0012122bcd09ed5a5e76c9ac146fa706918c8d37cb308cade6ddccac125416b1fd92c1","first_seen":"2026-03-05T13:04:34.948649Z","last_seen":"2026-03-05T13:04:34.948649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/eae67140e739bf8a.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/eae67140e739bf8a.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"cf14-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TK%2FmymdQvVMdOZG17KcBvFAznAbVUBV7T6kvgxSn3qC783CA4sPZvUckl7UGMfjWyf0sK2r%2BiybFPDp9LlYWl6Knp4i6MDhryp6O\"}]}\r\ncf-ray: 9d7952b24ad2516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53012,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29175)","md5":"5c08fe9ec37a475f5088ca31b52ac61b","sha1":"28e6c1b12531189f820ab11ff88152cd522e8d35","sha256":"40c67df7ff2d1eccf9240d29814dd51ec8234badc4e9ab82ecc92089ca944ffa","sha512":"44a275de412cbc1af01c9ac7b3e420d94f1639de4065914cfc903e957377be901187682d14b570a5f1e32fef777d044908eb9c502f8bf2ecfbfcedadca10a2e3","ssdeep":"1536:Yuu8r0x9kn7k1uuFYjNT5zCLctDGPP6byEZjwx:YpGdZjfzCiDGwyEGx","tlshash":"7f33e79061556aacf6570195b56fd00cb02ebeacce0bc418b7bc3c792a148c4bad6fd7","first_seen":"2026-03-04T16:26:33.003519Z","last_seen":"2026-03-15T20:04:54.973978Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twemoji.maxcdn.com/v/14.0.2/svg/1f1f9-1f1ff.svg","fqdn":"twemoji.maxcdn.com","domain":"maxcdn.com","tld":"com"},"ip":{"addr":"104.26.7.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:52.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 13:16:56 GMT","end":"Sat, 02 May 2026 14:16:40 GMT"},"fingerprint":{"sha1":"70:22:0A:2D:41:7A:3B:76:62:1E:FB:86:5F:7F:CB:BE:78:EC:9D:E6","sha256":"06:69:8B:CF:DF:6C:4C:03:A3:B2:F3:33:96:E1:A1:D7:68:0D:F6:85:A5:5A:3B:DF:20:E9:43:A8:25:4B:D7:39"}}},"request":{"raw":"GET /v/14.0.2/svg/1f1f9-1f1ff.svg HTTP/1.1\r\nHost: twemoji.maxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:03:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 19:18:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIibdtOgJ0LJPmfXgwuPf8r4t4xLN8OyrVN0ICOdqF8oIMcyhfJIMkql1QDpH%2BY%2Fz1TkOk4YrXsJzSCQm4zizW1EuuDFbQGSEXz3NXYaoNCe\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68e4161d-19c\"\r\ncontent-encoding: br\r\ncf-ray: 9d7952be8d61d9c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a7681dc245b3106404849f80f5937a0","sha1":"fa1a399e2332eb5c1a7896aa5c544321fd12af98","sha256":"572324a684c970ed622cd22b378532607de2c7bd294c399a4e7dca4f0b3d2b25","sha512":"93da40111fd5a45006e90673d186931e9627e2ee0c7e60771aca8c2f87ca40fecf6c64a2f74d0f08d13745b7b0d8f1ab47cb1f5b3a8df984a193692eaa313b30","ssdeep":"","tlshash":"2de0ab89aebde0c9480ac7703e6db2c6b29216e432a505dd7082432c75c73cefe90e15","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-06-26T22:28:13.267714Z","times_seen":357,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/src/assets/fonts/Inter_18pt-Regular.woff2","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /src/assets/fonts/Inter_18pt-Regular.woff2 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winspin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUSDN6WYiBB3v6j%2Fw3vDWEeqAfoiQTwLy0gACyFoscUQ5Odcq%2FtlyUUS8zl%2BP9o3dme5ZMcdqLNdyLgki0Y9KlMC8Ey1%2Fkwrs1hR\"}]}\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=31536000, immutable\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/fonts/LemonMilkMedium-mLZYV.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Regular.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\", \u003c/src/assets/fonts/Inter_18pt-Bold.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"anonymous\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952a848b2516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38639,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23735)","md5":"ff2162c832adea57eb206cc594de77de","sha1":"3b52f3865b5abda0bd146c6da948d19d204dfa1b","sha256":"edbdb7522514c825bc747afd03f984772ea92cbcd9514a3bf07e0aa2596c2428","sha512":"77d6b45ca6d63ccad6f52d151ed1c1aa9f812760fd5674c4c8ff62f0facc1d87aad859e4629ffed3a1cc6b526f27ee9e3d3f2d18be20d214d8dc28fbe6178080","ssdeep":"768:0EECC1SOkziFlBClH7ThS00QjVWwBJJPw:ulBkHhSv","tlshash":"2903761ba803c916a96eed1812ff2f2d00cca5378961dc39f79dca4d0b8157e47e6e85","first_seen":"2026-03-05T13:04:34.78766Z","last_seen":"2026-03-05T13:35:40.210442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/f0706b7ff2c7babc.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:48.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/f0706b7ff2c7babc.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:48 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"4f90-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfoFtjrQn1b2dQtQNjBSlDQGFwtBLikrgWEvNkkekeRTAqwH5TsUrNepR7RwDjeNCgFj6xfoh1JUT63nKO96Lbf8%2FBhiTX6go4Hs\"}]}\r\ncf-ray: 9d7952a858c6516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20368,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20368), with no line terminators","md5":"eec1c9e1a0a45063bee7641ec03731cc","sha1":"f5643bf8a7b65a2df4f8aedf7ddbc9247fdd6456","sha256":"ffdea758e7f4299c287ff1699a77acbe33e2091615b0772c6866d8576aa8c2e8","sha512":"77c447a1ab18a5afd009355a10dae483fd7132d033715159871f4bfb4c61d92c2b99c97a5ced1d36fdf5d10decddbcecaa91d2723d76b0ca1c2de173c3319b81","ssdeep":"384:ovHXJXPfPFOCA/MRljvhk2vQvmhEueVFdaQRnz4fn/vfpVSh6jx6I:o/JXP3FOCwejZTIyeV+QRz4Phn","tlshash":"4c92e7d23395f2262b974091d43e4009f23a5d3a5449602cb6a89df3b5538cab2fff39","first_seen":"2026-03-04T16:26:32.868468Z","last_seen":"2026-04-09T01:34:11.930985Z","times_seen":17,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/b7110877769f0f22.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/b7110877769f0f22.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"101b-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giGTnCjrNysljgduGpqQJkoMI%2FDzoyIcVPJdS2l6eF1eHKciyAYa%2F%2FKOBlhjcVSQYM8sGY39mfDvNtQ3ICjtZYtzkOCP5Xqc4WVa\"}]}\r\ncf-ray: 9d7952ae8a05516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4123,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (4115), with no line terminators","md5":"23bb12ea805c4ff15041d5d47dcbac5a","sha1":"8ac9555e1d7cc34bc18b0044cfd973dae71a9d35","sha256":"8284d018dbe1da8020e3a56c8d8d2eab346e3f095f15dab9ac816e6abd37eb40","sha512":"1dbd31e77b234c873adee13f73dca5007341e64c62743dc1f7dee735da4a035b37aa1e6fbaf065d612d453e7943177b276631b1cdbac3cd9ac9f68d3a08ec994","ssdeep":"48:uD9ee91MYEHcLzmvTS7BCFAUA8BTOQaKz+B0hpANEXa5dEXvUq3zqNUq+oONUqhB:RyvYeBrwNIRNFsUq3z2UqmUqJ0YAqY+","tlshash":"6281710fdd060378074681a434ff1b9ee53ca54af1f685979d1d863c22b2bb2827e399","first_seen":"2026-02-01T14:00:57.510483Z","last_seen":"2026-06-10T03:58:04.116426Z","times_seen":113,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3bf9612b3348457c.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3bf9612b3348457c.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kUCTkfC%2FaxDazmWc78Sb4s6zSfXKY74Qvn2ujV3gZEHMJdlpPp984V5WzegfR94GkEjiLmpNsU%2B4ftnqyvXeYJpXU4I2jkseOYN\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\ncontent-encoding: br\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"f1-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952af1a59516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"66b74967a779809565ee6bf2ee6b5b65","sha1":"f1089c9350d314e3802541ea297c22765ee890e5","sha256":"0ae3c7949f0b8568f400c953f0659ca5902499840c7029f0b1f904d83ebb4456","sha512":"49e8234f54190f060a2a7d0e239cfb34758d209d114623e9c90d391513e7cdcf9a302979affd6bb028154a80ddbe76967e8dd022ffeb7b959d0fc274dfe48223","ssdeep":"","tlshash":"0dd0a7596481dd3c1808529de662332a34a534b5618e2406d01eddb05274f5895405c9","first_seen":"2026-01-13T13:58:34.43815Z","last_seen":"2026-06-10T03:58:03.931236Z","times_seen":227,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fglow1.webp\u0026w=750\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fglow1.webp\u0026w=750\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 46524\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: TK3NPXqk2-1Z5IiJZC2NJFzDwovHnmzW39EohndoAFE\r\ncontent-disposition: attachment; filename=\"glow1.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqZSH8WxGz%2BfQByTNM84oujbnF0qnXS60BT1FKB4yWcbGPjzG4OhO9NrlDdGnoj%2BcWbcL%2Fzj4tYn%2B5GiOeP7B9wxn1Wck9BP8VxT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b7eba1516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46524,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"066a881feda615d39d21376aa023fabf","sha1":"88821e6f69de113a0329ad02172b3af3f91c2aa7","sha256":"4cadcd3d7aa4dbed59e48889642d8d245cc3c28bc79e6cd6dfd1288677680051","sha512":"340c587b9ed735e8b554ae8cdf15c748016b828af64096ac7a8f1a702438303e4e32e6a7b6223e782b6c64d2b5401b53c0002ad33b358ef22ce6f3c405aa1732","ssdeep":"768:Con4y/8Y4iu77C3j0o6cmvEq87Rysm+Ap3xjOXBEGD/ivuem+I7+Fsr0imBEfX4Y:Cy94nFt3gEsVqROdDavuo7CWmowFOTPI","tlshash":"ca23f2661bc92f77e4be0fbdefdfe629b94404406976a846c660240db4d581098cceef","first_seen":"2026-02-18T18:42:32.452899Z","last_seen":"2026-05-28T13:56:00.739851Z","times_seen":16,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/3b840cda84ec574f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/3b840cda84ec574f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:28 GMT\r\netag: W/\"2b60-19cb66cc6a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MV2cIpVaVAKAEHsNvJtDumYkWz9WSCWLjmFqeXHfg%2BF3VTl1ImYmLM97QBXtrsNLjqYFBSS27uwCxLllK%2BmZ7RnhiojPlUc%2BkDUe\"}]}\r\ncf-ray: 9d7952abc95a516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11104,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (11104), with no line terminators","md5":"746cdd8bf6ca4339d1726cf94a08e1d2","sha1":"c9edcce0b291e97883b40461e076a108ae120a69","sha256":"a146c922f786b6893e4708c51eeb308cca13f1c838dfef5f42ab89a44179815b","sha512":"a6b3344e364ee3ce591e57fc324e302e1fc93253f956f3cbcf56b093d2230be2bccefcfba5615c2bdca9f310b891f4a9533e650438155684935c5ad68543513d","ssdeep":"192:WMQVPsLQ7FkcfP8Q4U+XkXvN5mNaKHVeme7FO5B8fprfUvXJASuit0l:Ss+8zUiaNANx+Q+pbUk","tlshash":"3532751b962031be0693fa93665f31937b3af0e43a02e65ccfadc0581399cba45355f9","first_seen":"2026-03-04T16:26:32.864424Z","last_seen":"2026-04-27T08:35:58.647433Z","times_seen":21,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/81c836af9f9b281f.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/81c836af9f9b281f.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"6a8-19cb66cca88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFcq2jGm4EFZn3TJ01O231IyFW1jzNQceL1yWeZK6B%2BOVrkkvmyYbn1PxpsvPqMBionTsoPTs00sRkbL6Y10WQVeH8KYFoOUMa%2FN\"}]}\r\ncf-ray: 9d7952abc95c516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1702), with no line terminators","md5":"88fc2741c51a428c589e5dd95f2e6593","sha1":"27ce73922a6530fdf92133454b54e4b6e8624009","sha256":"52f1bfbc0f217c64485369eab5c4ba250b22e8bad9fd90cbe1f5ae0b13df4704","sha512":"6c7c6d48e3bbfd92965763bbb748f5f7124c11dfc9c1a5e124b0392e47c95d853ac2a96d9db57fdd9b545359e9a030a2036a42d810bee8bd93d1237b0c3354ec","ssdeep":"","tlshash":"bf31a80d484b4eac5921663035c37f6e746c1cd291d6a805c97d877832bbe4cb587e29","first_seen":"2026-01-24T14:43:36.877112Z","last_seen":"2026-04-09T01:34:11.933103Z","times_seen":210,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/static/chunks/fca43ff19ca84387.js","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/static/chunks/fca43ff19ca84387.js HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\npragma: no-cache\r\nexpires: Fri, 05 Mar 2027 13:03:49 GMT\r\nlast-modified: Wed, 04 Mar 2026 01:18:29 GMT\r\netag: W/\"3a9-19cb66cca88\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBPxpeand1cV%2BK6D2P5W4POfd%2Bnhc3TeYcWsfx21Ha1zJJpbM3k8BRFk90lGOzvwRqOyKTlQbj3c8KdlnTo7W51jfp%2FZbPzTAjTg\"}]}\r\ncf-ray: 9d7952ad6999516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":937,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (937), with no line terminators","md5":"855a8aaa259c9f21a6b02af8cb97a58c","sha1":"aa42585d7e5a72a628c335b8f51c1847392b28a9","sha256":"284d8ae72633a59ea67dfc7e98f008a06839799d1b63caa791bb8fbda1d6c5f2","sha512":"bd5f4cfb8debef8aadbeb4a3a03806d893c7f49edcdfee31036e53832d5d169707c52d955558889ebc1d82288795d6b91e613ed186f60f70ce4f0f2e525ac70c","ssdeep":"","tlshash":"7b111c840ea4b47c2557120878f36781b07c0666e19a708e8ccf475cc2f9b38992f3b0","first_seen":"2026-02-01T14:00:57.583606Z","last_seen":"2026-04-09T01:34:11.950215Z","times_seen":98,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/domain/settings","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:49.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/domain/settings HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:49 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:48 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIw8Vj50Rc7GILbJWo8WNbkT8dNwUaNWWKP42GUswdvSl5GKOyPgOEMBycsKBdUHIdXPIze1qk988YnaUpxY%2FRYQmuxM11%2BlB2%2Fz\"}]}\r\ncf-ray: 9d7952afea73516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"21b28798270caed16be16a8b1760fb21","sha1":"41a414fd2c7a043ada1fa014b8553c905dafc65c","sha256":"7c74caf79a14c6d1a39fa5f0ba512624b119c7fc1a5e5fa795c81888115addf5","sha512":"c9f7220fe44f2a45e53acbcad210c612fa0e9ca167184c64c8a68ebcf3aa80db6fd1234d0a598559b209874e97cd897bfd6f27347c04c6d00ee9c9dc9e772378","ssdeep":"","tlshash":"d7114e2e485439bac5c5e61adb1d3d074e3ed17762321d35b79cce3412fb0761628a27","first_seen":"2026-03-05T13:04:34.811754Z","last_seen":"2026-03-05T13:35:40.235613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/user/domain/autopush","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:50.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /user/domain/autopush HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndevice_id: cc3a645ed66bed135b90b805ff3c8a75\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:50 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d37UAY%2BG%2FiBIkBTVp9A55KspRlh27Zlb8FTfK8ybvfKfHtOMjDVvtHP2pXH0OjmXQY%2F7ApVdkKcdJnJ6IEsFdnCNvvTCGjwQL72N\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: http://winspin.icu\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nexpires: Thu, 05 Mar 2026 13:03:49 GMT\r\ncache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b74b86516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"214a8792b29d090b17805b20abbabb28","sha1":"d45bb31fbee8833d3dc269914f9b2e800cb082da","sha256":"507857609356eb50d18eff02ea6de1e89667992fcb42b24dcd176ba3f65fb027","sha512":"efac10e8818987bc6b1506375d07b135f238a9c705f611c39185fc500f20322242b1fecde290e94c3e9de4b864887b19b221904592dad0289d4df0c8b2d25cba","ssdeep":"","tlshash":"acc08c0cc42810f098c6e143b3673a531ba9ca3138ce5c305638613c32db2754538c22","first_seen":"2026-03-05T13:04:34.959757Z","last_seen":"2026-03-05T13:35:40.244823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winspin.icu/_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fsport.webp\u0026w=640\u0026q=75","fqdn":"winspin.icu","domain":"winspin.icu","tld":"icu"},"ip":{"addr":"172.67.194.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winspin.icu/","date":"2026-03-05T13:03:51.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winspin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:56:04 GMT","end":"Mon, 18 May 2026 19:54:52 GMT"},"fingerprint":{"sha1":"B4:97:AC:AB:46:54:0E:28:C3:77:FB:BC:87:5F:B2:8E:AB:69:47:8A","sha256":"D6:38:BD:31:99:FB:A5:50:A8:3C:12:07:1A:75:16:D0:BC:25:09:8D:62:56:2B:6D:D3:C3:AA:4D:D7:34:CE:29"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2FhomePage%2FbestChoice%2Fsport.webp\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: winspin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winspin.icu/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:03:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 47836\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate, public, max-age=300, stale-while-revalidate=60\r\netag: HKw5P_13INigj5frYTW4ObmefeeGwZXi-duGWExDUyI\r\ncontent-disposition: attachment; filename=\"sport.avif\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TM9wFkVZcym1DJyKx%2Fj3a%2FOYJIN%2Be5PiDaSojs2hxnOpOOn%2F7E%2Fp64OJ5n5XV6zipwpD1awWv2A5CN2piyNw5EOYj7f4gcy2kpVb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7952b7eba3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47836,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0c912ce9df8f5dbc4fbc880b7037d956","sha1":"0ba2a1c1e62c935bd7b65692d02f5f6544819324","sha256":"1cac393ffd7720d8a08f97eb6135b839b99e7de786c195e2f9db86584c435322","sha512":"f704459d7539d812fc0d06c961ebdab67f3d8159f8be1bf2801c24483016e651214c2aa3d475cef3b0f3bb88b0770c759caede27f94cceea3db33460b3e95185","ssdeep":"768:mB1g6yBy28BnO3xrvslDdPPjop3G9Y1WP/EGm67Vw0ipkxusetivITCW/5gZAkmc:a1gnBwMp391o8uVw0i7pu65gJ","tlshash":"e523f17ad27f9f1fd5ab31f401e32255a861c774fd305b2006c444b5a0f6b4a6ea87b2","first_seen":"2026-02-18T18:42:32.541085Z","last_seen":"2026-05-28T13:56:00.747914Z","times_seen":16,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"winspin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}