{"report_id":"9a34e217-2ac9-487f-a3a5-769939ff64c1","version":0,"status":"done","tags":[],"date":"2026-07-12T22:21:01Z","url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"title":"WHALEWINS: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling","dom":{"size":41555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (41080)","md5":"04fbfdb553b5f348c1d521555cbdede1","sha1":"692ac4d0a8b437d3e5fc4a0d7f73d0aaeec2e65d","sha256":"c73046c5897c3dd51e7ce5a0e21e11aab4a9327d91d00e4bd6e4b380fcdf731d","sha512":"cf5a1bd2d0c3fd00d198f1f7a735f09b7529512b512fcde5cf3f52eb1aae6a9d816ace71286be9bc1e204972ba9204cf8eb42606037d0773b591de387625dee1","ssdeep":"768:/w4iPY24mCQiwxAU9kjuUcPupS3afb9jNqCafky+Me2afAZyQEU9BV+TyF:H5He10JfoQk","tlshash":"5813b429b401de6edc675e6d207dde3a40ceda3bcb35cc68e38dc96a02824795bd19c1","dom_hash":"domhash7f2964e6b2f36a3ef7269146ff2d9f0b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:21:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"whalewins.site","ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-02","domain_rank":0,"first_seen":"2026-07-10T23:05:23.427921Z","last_seen":"2026-07-10T23:05:23.427921Z","alert_count":64,"request_count":64,"received_data":8060053,"sent_data":36626,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-13T23:28:59.241352Z","times_seen":187060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"948200e2fe71528671f984db6bb6b6de","sha1":"7389c193588330f74d0b6ce7c78f707a2da4af20","sha256":"b75e9d86a4fbee0bc4fedd0fc7b89df0a14dd04939f4dad5f5f5abbdabba06e1","sha512":"3aa1141b6c85f338e26604663ab91ee91b23009b2f72f4fdda8b1632434092e95cf335ae524fe168d2a9f5230dda80dee55a028aef7fbc522235ea712f3a29e0","ssdeep":"","tlshash":"5b41f955f40ee9f1a852de0f31364e3584c49efe9235e888f38dca9641c64b60399a9f","size":2166,"data":"","first_seen":"2026-07-10T23:05:30.624395Z","last_seen":"2026-07-12T22:21:09.067894Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08944330adb899e087938e02c3c1e0dd","sha1":"c8a2d798c3d209e95e133f8c43f1d9721f79820c","sha256":"f066bae70536260b488a7cbaf2b5081f37ffd7c1f1ccb6d49a04ad68007e273d","sha512":"72dbfc37b72d240e60df81df35e8f03e1fe88b451d49a0b788d8defb765f17abf99d758f7a1a988e94280d11bb392fa26308f4c4666cc6cb04419127d74b4ff8","ssdeep":"96:LS76kMyEYXSYWNYhs/sB5k0RZx20WbWVCsqv76kMyEYXSYhHDx:PuSmajx","tlshash":"0bb1af3d2001de5eedab2e68513d8c39258dc97b8726ceb9c1ddce315a4a07867d79c0","size":5262,"data":"","first_seen":"2026-07-10T23:05:30.625424Z","last_seen":"2026-07-12T22:21:09.068304Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fc92427cb29c36466f059b7a7f6c1d8","sha1":"52b34706649eb8cabebe83dc88374bbbb4981d15","sha256":"7c1efc728bcea00a55ee02ab734659fa553b5a080759de2e64b9c1cafafc0cff","sha512":"26eff4f1424741a334b09305d169d792e4785ade50bf9175eaa2597ca362693205a31e370fd33931a36025e782c61a9f577520a0630d15d1f2832b2475295c92","ssdeep":"","tlshash":"0c513e2d700aed1cdca75e1e047d5d3956cec97ae73aceb9d28cca66114a438a3c78c4","size":2946,"data":"","first_seen":"2026-07-10T23:10:33.64177Z","last_seen":"2026-07-12T22:21:09.068809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"933682ec098a27832d260e61f8260676","sha1":"0ac5c9c38e3fea3e6d0e130214cdd6d2e5320589","sha256":"ab6f2925bef418c90d646c90bbc67f787cad8a1e24047eb5301154b6efe4c6a0","sha512":"da7fedac24b8f0fd363aa084435d5fb90cb1399fada749a35ffda540be9944d11869570f66389dda6f8c3f0d5e6b2750cb7b00f192f6976ab0559726a73a5898","ssdeep":"","tlshash":"5e51f03c2016da5de9ab2e18117d8c39258ec97a9726ce75c2dcc932554b078a7d35c0","size":3136,"data":"","first_seen":"2026-01-31T21:08:57.39267Z","last_seen":"2026-07-12T22:21:09.06974Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63987de1d94a416177c4f89c1fc8efbe","sha1":"1458eb4f03bc4bdb0573aa0ff7599ceb439818ee","sha256":"6fb47e8bc485df60cc9d3d70fdd10cc37033fccd6dbe149dfd581f836dc73ac0","sha512":"db897b370b1ac0afbea450d4f35333e02c6a2881094aaa05cace24cec14166f2f5f9d9597872fd96e0a433ddf156cfe06040ff96e2351799333096cafe820268","ssdeep":"","tlshash":"9951610e7c15db12dc3e7c6d053e9e7640ccce778760dab9819ece490a066b62bd9881","size":3156,"data":"","first_seen":"2026-07-10T23:10:33.643134Z","last_seen":"2026-07-12T22:21:09.070302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"352bb1aaaf02607a3c3378c8d7120c66","sha1":"aeabe068a2a4bf23848b266e91af57ec22cc728c","sha256":"661d319b493a5538aca8a997ee32b17dc82684b78f28d8b6f806bd87a3c69f66","sha512":"1b08137e49e84b9fe06a11f60d770ad02a674d683710a03ef8ea0ef23afbe2230d9c0a1fa5b078d0cabdaddc826d5fcac04e536dfd573bf4fa805ba48e13b0aa","ssdeep":"","tlshash":"92d022a19c03cc1cc2a64f66383e2c2621cdceb90b4644876dc8d93dadc6e340ab4dca","size":213,"data":"","first_seen":"2026-01-11T05:23:22.771879Z","last_seen":"2026-07-12T22:21:09.07123Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85c43312c048635d18ffcf5a87751be2","sha1":"ca85e06a161977f00f8c309dd4558e7315fba3a2","sha256":"9420a04c3fe02a3419d10ad348f5a62ac0b284147460b84b8d345e0d1ed818b2","sha512":"f4a99732c093450aa9c64f226412c92225fce341a892b153b1ad8b1f51c0a0854ac18fa6587dfa14eb9c70b82bd7e8885d14a8f1cb1822faeaa972175751962f","ssdeep":"","tlshash":"8c31a919cc1efe45a8a2cd7e183ebf31048ac87682300a59eb6ccc4f149263d5bf4e80","size":1670,"data":"","first_seen":"2026-07-10T23:10:33.645052Z","last_seen":"2026-07-12T22:21:09.072188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57042c903101b1acf5d5bcb0816ee363","sha1":"a75294d20176fa19a07b1a0a01dd7da639aff667","sha256":"a7cbc28fc819effafb6802949bf8d0c6a30946d05467244b0a78f1c354ff17dd","sha512":"d5bcb902fbcf7f81ebdc2549422773f6197243f3a69ac3205f533806b6df280882f27b9a19c895ad8f6faee388fb13026b47427d9df3563fd56ec97511ddeccd","ssdeep":"","tlshash":"76013117d85ee9443924cd9f641a0fb288c2d83ec530192df68dd9ae1951d1b1748991","size":682,"data":"","first_seen":"2026-07-10T23:10:33.646009Z","last_seen":"2026-07-12T22:21:09.073108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3b3fc5f34d4c0ae0614fe1ec0cf22dd","sha1":"da724a1bca9f29ff676afc03aca5c3a9ead14478","sha256":"6125d93a279c1571886ace65e633197f125e3be1f15bfba486deaf2551db0da2","sha512":"a2a0c53f7902779daaca61a055a7645bd0356c639b0cde6c357af1e63f44f00cabad0a77acf03b91be1c96ce1b5708533d7d3dee1e0d64cb0f98ef3649271f7c","ssdeep":"","tlshash":"5b41eafa7041ddabec6e381805bf2c3314dd85ab06849f78c2dede541a0653e67d6e80","size":2027,"data":"","first_seen":"2026-04-30T06:46:54.061352Z","last_seen":"2026-07-12T22:21:09.073936Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/6fc4a47c-d2b0-40c6-be70-9d4c641a9b8d","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"f16a7e69ee76e62051486aad2902abbe","sha1":"fd70d974b356e1db0363e6d84ccc3fc51ab1c1be","sha256":"2cc533eaba03b0202afad4cd23db32ffbbf59a19b3f06ca28ca5c7e8b21a3cdf","sha512":"c17195844a57c80ddee82b4eee1fc785235b5daab022e6d7836c1b1114b9c29bbd6031cd51ddce8484ff991dd5980ef5cf7d1f8a8da96404f1f61634e390f80c","ssdeep":"192:d4m0DpdV604R06FYsQH49N8I0DFneuvNvMJVHyAr5g0OVPFDhkw/NYGtvs+:d4mCfo0j6FdQY9N8nDFneyN+HyK5g08h","tlshash":"6022195437923179439395e1594f898e957238223c0380acbb08d8d96cf5dcb61eefbd","size":10329,"data":"","first_seen":"2026-05-25T18:36:25.848783Z","last_seen":"2026-07-13T23:33:11.685528Z","times_seen":2849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/23d3d4052dec4e0d.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7b5b06921f0355b56e92398bab686bd","sha1":"d4b4317770c4497e6ea52ad84f4859fa28ddce00","sha256":"1e05f07e957f721ff1c27d78f5be56fefec3a9e45310da936acdb1b89905b91d","sha512":"4f354facee8729a81de4769becf3b819f633da458e2bbe30ba817d06a15fb4d08621b3c2de16b881b92638288caaec491005154115369d26bcfe9bc33a3f9a20","ssdeep":"","tlshash":"ee41b7453045e5a9291318a8a0bf040db66f5fb4810c9d3295ee74f5212289cd7936eb","size":2157,"data":"","first_seen":"2026-07-10T23:05:30.604361Z","last_seen":"2026-07-12T22:21:09.057536Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/12ca47415a4bb30b.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8813508e45a53ec2c4dd552323d8286","sha1":"54cbc1c1db6902d3ff08a44167317cd4d2e73b67","sha256":"1aaf0c6c1572264415a71bc14bb558087aa928aec4ce8a65075d873b8e04a937","sha512":"3b76b2ed935a79d08cd9241cfff03b845aab58c6fb304944f519617c4428ab2a8800992fe8a257a1141c38ad81070ec69d3fae53ef1bd38a0dd5b5b5751d642b","ssdeep":"6144:da2b81orRHq4wMkpAZW1jwR5tK8bceP4LrUHTQM9bDjXCdQ:/F0AZW5wR5tKrD09bSQ","tlshash":"2eb44bf93695b1335ba602a6407f0002b3785a6b240e4864f365edde74b844ab1f7f7e","size":538436,"data":"","first_seen":"2026-07-10T23:05:30.556655Z","last_seen":"2026-07-12T22:21:09.027934Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/3431dae953ab2c59.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"294f91ee2d9adc7ee47d4765e0807d2e","sha1":"1a1ddf37033549a06eade8456899969eb88c6257","sha256":"63a1461c6b456d475f933dad1ccbf33d825027c57b9ff98acdaa1972dbf5e8cc","sha512":"e82ba48b057268164f1f64946345413a2ef8931e48225ab36d4dfce1a8fab9eae7eaceaee2decddb6be8be14a20fe4536782fbc4732528d5e231e22bb38805fd","ssdeep":"96:mctuv2SKkfARZ0kqJFv2H43uuqoE91Y6kqdYqiEAX2v2P:VScRCkqJFezuwg/jlXxP","tlshash":"919185b230a0f0d0d29b4185852b481eb23b2d3d609d70b497f98cfd67e544de6a2f9b","size":4455,"data":"","first_seen":"2026-07-10T23:05:30.589949Z","last_seen":"2026-07-12T22:21:09.017339Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/432cc5adeb7a1756.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b662c6789df2b615886e54fe6c2ea4bd","sha1":"d513f419b13c6b2244670cf4b1af58bcdc64089e","sha256":"760d15c6a0ce16f1d5f35b020fefa49c1a40c5fae1e4539f978569c396c10b54","sha512":"24ef5c17aec85648bb3e41b90c96ef7df8dc03df2e84129f51e674ec84751110eade08701caf730e7666844365deda1628f8f40cabd03e9cb6681bd53a8b8c3f","ssdeep":"192:laiKfRkV8MgRvuSoX+UrlMIJYXxdXz6NntN6MjCpW4W96DULHhWp1eOxZMq7vCNe:ckFOUGcYX76o4W7MLNGLURcOQZ","tlshash":"b582c87571417992f38b0065c22f8815b37e6875240d8838717ea8bf25f1989d1bbbef","size":17746,"data":"","first_seen":"2026-07-10T23:05:30.592232Z","last_seen":"2026-07-12T22:21:09.013414Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/75771e30eacdc68d.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f52d0f95b9b78fd3357b53c2052cf3d","sha1":"2b85dccdc9d9dc8e5e51c8d68a774ce1880d37af","sha256":"5c0df958250d44248717bb5352895d6de8245bf69a57340ab08b21d42345c6b0","sha512":"51be996959f3a8b906205fd1a0b41bdb4bceb371af32a8b3a4a0652a1b46f3cd47f408c0f610d6cd0e0af3976767820e50d86bc7f103ebc2a3e7374102efb442","ssdeep":"768:XgutAd+52/4a/CWcW2UqyAGCegDMSHAT4fjt:jtAs52/4aFcdUq9GCegDzHATa","tlshash":"fc030ae87251b856c3da4199c0de8a41e13a49b9100d453db7bd9cfb2831c8d62fbb7e","size":39278,"data":"","first_seen":"2026-07-10T23:05:30.611038Z","last_seen":"2026-07-12T22:21:09.029412Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d3131ef7599bec6ca6e798e19fd3fd3","sha1":"546ae27474a3cbf5fff5cc3a780b5567405deb7b","sha256":"722508b1fa89a4212f5752a04ea549422e3d55f8827ac4776f1355a51eed45e8","sha512":"7355eb0f59a48ef727f58d021e079c9cafafdc5c9f1676a818e98bf943297256d90b37797596bf115abf90bdcc010590dd7b5cc0fe334eb125fec0afaacd0bb6","ssdeep":"","tlshash":"9af05270b04235e186a6222848373e0216be222774095800f74fe2206f3aa2b439360a","size":485,"data":"","first_seen":"2026-04-29T20:31:25.076089Z","last_seen":"2026-07-12T22:21:09.074984Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/op1.js?v=1.5.0","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-07-12T22:21:09.056069Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/de7ee0178df35728.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b78b7fe4376c6ff79c855f076271b4","sha1":"2e7d026dd3f7a5ced44716288e0e18714619a7f1","sha256":"ffdb7ef21a68ba6c4533e12c1c3ad07ec1be866818720fdb89310175f0c81d14","sha512":"42bcb3ba5e0fb2c6c2d3ca348921ab91a014755c497fcfc76ee2c21323bfe1921966964fd2285bac20f6c75ccb6fce427ff80453324821d253411c86d7bcfdd2","ssdeep":"384:W7dcz+GQJOKC/K3mIwyy9Ns0ZPBn0s6PUPP:W7mz+JLCiWIwL61g3","tlshash":"bf620afa72d1fdb383a70195843b4006f7281e72145ea4e4e7e9cce6356094e91f2fa9","size":15298,"data":"","first_seen":"2026-07-10T23:05:30.606136Z","last_seen":"2026-07-12T22:21:08.993431Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/bf7a40699cb93064.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0821e25e2b4ea708396b43b921ce0c56","sha1":"aeacaab11f1bc4542d4362e79ba93cf089193861","sha256":"97b0817276db0b2df93c35d1a1284a43f2e503915f0ce5c99a45ead1e8291a59","sha512":"250c252eaf63748316c9283c058e013f87d7d845a85454fd5eb18e9fd781d5d574569fc0d26e111f2c1b24162d51f6f1b8fcf56bf784c7c388e7f0b2e3e6126f","ssdeep":"384:yliwDLoFx1AanV/WchDUxulzI0e5zvx7hyswejAAKP9uEEWS/MnZhpdsoK/OOESb:ylT4/Ba5Z7h7wHV3EWSYPoBjaA","tlshash":"1dd228dcb18174b247e745a5a4bf020af33c592d580d8024b264dcb939b5e8e467bfae","size":29694,"data":"","first_seen":"2026-07-10T23:05:30.590851Z","last_seen":"2026-07-12T22:21:09.006496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/80809a889cc91016.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"616c41d02d91826e2d616d01f2a4578c","sha1":"fc249db40c7297f0dbb0f54ea56b2c0cb005378a","sha256":"0318930890924f968b8bbc8828417beebf7d8eccafdadc29d70dda04f552eb0f","sha512":"4ee0f78d1fb9f63442f3a4a7ffbeec80b0fdaa3fc8a49088003259f79e9bf218d6ff03df3d35a693dfdaca45551741813e6fa9d55ad9305761d02f181492e488","ssdeep":"384:RQ7sdTDDux3v/PsAdl8Uff9j8aB7swEIs8qDhwSvKO6ecNOaK6e2aPKoaKaE8JCD:K4W3v/Ps+8fAQ/D1x1zfeLSuhnCBNlQY","tlshash":"92330b76b072bdaaf37e84d4f40fc014f72e5db9d10f4455a7b96cb5226004892b2bba","size":53771,"data":"","first_seen":"2026-07-10T23:05:30.553315Z","last_seen":"2026-07-12T22:21:08.999553Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/e4314985ea6f7a15.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a985c902731822aec46c6feeec1c7f","sha1":"0b6b1cc0e99f8ab390a68082eb148ef28eae9569","sha256":"10f415abe906083dfe292528d86b585126a75978ccf8c670b3fd30236899fab9","sha512":"797d7fa15aaf2a83907579ec93ceba65a21d3158fd405d3e8e279c65e21e7ae4ccb9d7862b5188db6e77e1c3f62d1ef725e78be8c55eb74be3681b1afa88fdde","ssdeep":"384:8jrhDGGRuBURuDrTfIVZ/X+C90mkdG4+Z47a4SwToGFJl:rBam/8Z/X+C90fMzZ47ac3","tlshash":"b6e2d6b572d5faa2128341f0c43f2017f2684c7521ac7470a7d8cc9fb65888da6bafd9","size":32929,"data":"","first_seen":"2026-07-10T23:05:30.547568Z","last_seen":"2026-07-12T22:21:09.031188Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/5cdec3f79a4b7eda.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb3dc07d8d69014389ce1c4efbca6927","sha1":"cecc44654838bb0e41829976a6d64afee36f3280","sha256":"b3ae8f6aca10909ea36a621dd2f95924e369da530e488ab4675944255a2f4a20","sha512":"33a87965356e3376625b6ed874cb5159535f22b9f52edfc8dd214981ef184cbfd90c77e3e82572674154258ab469066be8f3ee26c43d2e3cf4dd5db7aa1a437c","ssdeep":"384:8ajTUmukzleEPQKqUd8xfcjCxa+1G0TJTJJQrtgK0/H5JiGUreqe8lYjYvDyWo2D:8ajomuYlMUd0cjCxPG0TvMlqBtC","tlshash":"e9d2a4a971d5f4910b9354b4803f500bf23e1c76296da0e4e3a2cdfab9a055ed133f9a","size":31101,"data":"","first_seen":"2026-07-10T23:05:30.549999Z","last_seen":"2026-07-12T22:21:09.001941Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/91d88a3239e0df97.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"445432a850e56e4b23c624035e17b0a1","sha1":"b45a13c7c94ce27ab7705badedaea651c746f1ba","sha256":"dd1d5df49e49d9aea3d0461d78bad548e7698ecb55c270f0cd6f837a3a479f51","sha512":"ad3b15ac18e9653a1865a048421c8825992dbaae85843256a8c9197be1a3a18cd57b2d8a608ecee9fc0fe227c12e56a0dcb4ce53343d2d620047588ddef70e5e","ssdeep":"384:ra5SF5BqXE0m1WmRQQ0cJ3XRP79Fg/ely8qWtOPSNYdgoZ:m5SHBd0QMMxaXZ","tlshash":"21d2c8717395fdb252db85d9d03a0015f2290d3530ae28b0b394dcef368dd8991bafa9","size":30342,"data":"","first_seen":"2026-07-10T23:05:30.557773Z","last_seen":"2026-07-12T22:21:09.054914Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/0dee93c023b9b159.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d2afe459b297a1330dcb7a74cad3810","sha1":"7c6d199d3159bd0c518ce1fe356d87840dd97a9e","sha256":"06f92771eb55ea89c6b7c4f04e2a8f89a20f94b4257bf7606897bfb141d62d24","sha512":"8d5dc8bf279b949c8e6cb55177226e576f7821f145c92ae75d85ebb4194a5c867f5c0c91fd0fa2d854c20ed647c6aaaca6cf8a685b69cd0b43146e5137b54a2c","ssdeep":"768:67uTrZoR7BBAMBeVdIDlGmvlJuIHtXUqJWPokCEnLVXQFlUs4IKd0YW+E+S:ZFMBxPcIHJUqJeFXElUs4IKd09+vS","tlshash":"a053d9e57282717117ab0225907e4006e3b94dd0104e8138fe6dd9ee3ae549ab2f3f7e","size":63054,"data":"","first_seen":"2026-04-29T20:31:25.010352Z","last_seen":"2026-07-12T22:21:09.032236Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/ba25ecc9734175fd.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe6f38e411a0b73485c5c12cc926d58","sha1":"27254e7cc4cd161b7dd31db168d1758b0e4fa993","sha256":"a0411244cccacda1d5344fb56281ad1f359cb67ca6c0115bef8e3ec6478800fc","sha512":"a7fd4c17074fa22dfa6b6e1cbcaed1bd780300b24a8b417dd9945ff7ec54adf9fe78e856c77acaa4d1901729b499c757249b6cc9d48b3e3d1e18656a14ec3e68","ssdeep":"3072:03XrUl6mGqLHRzfDmIxsfHaQ9t8zfESo1:03Qz7RzfDDeaQ9tJl1","tlshash":"8c041adbb779d0224aea90a5d0350103d33a7b4a6548802cf65eddce35dc94ea277f3a","size":185713,"data":"","first_seen":"2026-04-29T20:31:25.01185Z","last_seen":"2026-07-12T22:21:09.012856Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/7c479c93f750fc1d.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b642c9f1423d4dd718b789bf8eb3cf3","sha1":"d6de703ce9d8713c36a233f397eee4dbea44546c","sha256":"3237fb43f91caee873a7d8d29a3f8981218a5c832412951a931981a5b631049b","sha512":"869a04e79447cfe647735d933ca3d4419e2f625720160d3b02d5c710c10572d5bfe6ce42488abcd6cf813d46b644c2a992144a4a91936cafa73fdba9fcca7ef1","ssdeep":"768:98qhuxG+2mAMIeUv68P0tA9gvMRlfo1CCEniZIVYCjS2u9a2uS:tyG+N7","tlshash":"93c26954a25c227c78c601b463a3b023e7ae557f35cf6078ca5d49b4b74b85ce2638db","size":26862,"data":"","first_seen":"2026-07-10T23:05:30.560434Z","last_seen":"2026-07-12T22:21:09.000474Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-07-13T23:26:47.867163Z","times_seen":23540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64b5041967f43d5efb6cf116e7f647e9","sha1":"b27d50916873615feaed9c43b51e8cd91f74b40d","sha256":"4c280fd4c9a89d292f4b24c6df06d34ad4b9e31277ee0f8c6e4a0e5fa65b6f58","sha512":"316c8bc610b2080d289ff3a26775eff89c0c9ea2d7224264fef1ae5b5068e738815108b0f71503c197928d93625b93c9e9a4c4b9d5713fc777ecad9b08940b95","ssdeep":"","tlshash":"af4174e5f532633a23a84888b230e745bbb7882e800e0464f04fc41e14ed8d8929fb89","size":1993,"data":"","first_seen":"2026-05-02T23:37:49.250666Z","last_seen":"2026-07-12T22:21:09.047004Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/turbopack-28ccfd079c928467.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d52be174726618cb2f0809bb8a4f79e","sha1":"b35f000af3ea40dc1458861e5d02f7aa6ca9a367","sha256":"8e6fa881466475ec113f46d1dcffdb952964cc69956180bef8625403866c154a","sha512":"8346785281492a3664dc84f885f212d649d121a920555908cbc5b89dcf230e2bfd63ef8fdca7872bd18b907e3e2e92d2c3bc534fc505e86373a9d27a75e9a748","ssdeep":"192:1WTzl08YEsUnU91E4dn2Npl/daXMh6rW9xocxkUk1MsS:1WTzvy0bl/A1aroQZ","tlshash":"0522d7da37a6f073436fa1e6807f0044f17944a9142d582c93aca8fb38354ae49e3f67","size":10323,"data":"","first_seen":"2026-07-10T23:05:30.593356Z","last_seen":"2026-07-12T22:21:09.037132Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/e8246987071663db.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e454ad01da01f691c9f79e797b7a97d","sha1":"1b95a12d8980e645e16c43150db10cdb3d7c7086","sha256":"93e2b2514b8e827dea9c7a55df8b4e2ae5d00e11ee10cd9b7a696ff2b2d922da","sha512":"e0a0794a5af1c7256106d19f0747f785226d5140d8df1ee36c826f6eb0cac2030d2e200466df9c4316889dd22ffcd25084ecf77f61d17d2beca2522e38ee2d03","ssdeep":"768:Gboj6J2fmNMBMEHDfjAqY2tpXI6KJxciComGJGSgf5djPH6rx4z:Gbo+qWxEjjD7tksomGJGSgf5djPH6r2z","tlshash":"36331a84f122ec7a132381ed405e284bb26d6e38d51d2d94f3abe47912a49c5747ffac","size":51627,"data":"","first_seen":"2026-07-10T23:05:30.586615Z","last_seen":"2026-07-12T22:21:09.002821Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/73545ee0-5015-48de-97e8-c24269e2b6a9","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"c7460c65a06620208bdcdf4a6e9de17d","sha1":"272d9244139a76feedf1c904fbe84b8b935284f7","sha256":"0632a2a4f1a6a1e5ca516c4244d007548d26b597d9e64086d9bbbfee662b721c","sha512":"9b03d4ecbd9f8856b787d3a9176f9b01bce35153eb72a96eb590c138240f5040e328d3f59c9651d2f3994789d8b83ced182e10bdefae356be2e28aae863a0b46","ssdeep":"192:+iZFBuu9mJfzxB2hwEqEVj46x0RRdxj/JeftbyXxYc54KL0YvFtw:tByBE7VIRRdxkftAYUhL0Yrw","tlshash":"7532bd5f319f49c63aea8e5fdce494c2e9592e0410ef49adfee969c317244492033bb4","size":11267,"data":"","first_seen":"2026-06-14T14:54:58.819384Z","last_seen":"2026-07-12T22:21:09.075993Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/8803d7c035faa1b9.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcc9c08de93127c95d9dd3f187710d48","sha1":"d6eb7d9ea637a6f77524c8bbdfccc3b95b26b50d","sha256":"48e55ff9a3c7331583580224961224a2f95292ab523a5acd571684a175dfba0f","sha512":"fd6cfa5c281941558638af75e183079e167ffe7dcd78f644c8ec5e4852df6c29c3435122bd142d6af6383ffdc5032ad60dde6557da476759a790d6f7f23b7ce7","ssdeep":"1536:+N29IxBQi6ha/rqjXICyFZOzPEPia2ng8sx:+5P6M2j4yzBlgJ","tlshash":"efb3f7f935d5f48207ab44a6c03f0006f32c5d37149e68a0a3e5edda746499de1b3faa","size":111017,"data":"","first_seen":"2026-07-10T23:05:30.610153Z","last_seen":"2026-07-12T22:21:09.048322Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/a3c3bd62e90e194b.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5894a6f7fd06062e6092e723045cd726","sha1":"8ef276581a64fd7195a29d7a2648f8c3cb59b9d2","sha256":"878ef5bfcb188e2e13aeecd155a296c7fc3b56c3b2b6f723acbb70d5359e880f","sha512":"cccd7c2f2435b7142136ec58d82a625bd43d54e5c4f6e6795a3f4b95d82db4fe2d72a84a3832886717050546a4313a7fdca86485d71eaf698ad0da5bf6b70b56","ssdeep":"768:HqaCHHZgKIgrBvnKgApILOH8nAmHaPYzLSL5KaG41fPWecxzDrfNljFKux7B:KaC3rgALOcAJYGaWPWecxzDrfNljFKuP","tlshash":"c413f7903160ac75de5b46fe70dec40667bc2060d8195820b2be6cfe139afd57762b8e","size":42143,"data":"","first_seen":"2026-07-10T23:05:30.548722Z","last_seen":"2026-07-12T22:21:09.044886Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/e62255a0a7a7ad33.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f43ef3fdce3ab54e7903745c414d13e","sha1":"85824ab4951b3f0ac8ac1987df12a4d117e158f6","sha256":"db38c2b6542b6a2b4d4ac400c99d321faaeb3716b56a1595ca84b7e594949c47","sha512":"5714358ac8acef9f97049fb590c3f2d65a4ac1ff1b9202464e4d5824f8be99f96774a1e0726c6f846ad1b98f4359188fff79a086fda3a9d1ca0ce4696a66bc2a","ssdeep":"1536:APkNLs1JkEYOFPpZT8AXwM6RuQiV5CoMrc:AmOxpZAyP6JiVsrc","tlshash":"1d636d66320224f65bdf42cae06f8605e33915d6900d4014f7ae5c3a6b65fe991e3f2f","size":73011,"data":"","first_seen":"2026-07-10T23:05:30.608252Z","last_seen":"2026-07-12T22:21:08.994718Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/4db91becd628b915.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bab7bf7c7771355c471983e7b5d90476","sha1":"d068273d89a9493df9cfa48ff29a78b041585465","sha256":"480a8f7f974e9fb6343c3914b04227a4e97df7aa6dc1091173a6d17033b33319","sha512":"fdf4a2d159e24e66c22cb952131516f052740e933af8a140dcc25675b32d0587b2d26f3744f3445e0caaeaaf7a47d251de56cced73fd7a62337e702269fe79a7","ssdeep":"3072:jeuxcvbX1azYazvbQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEe:jeuxKPjV2ECNvms+lPnjz6f","tlshash":"ef940888b760b022835665e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf38","size":416873,"data":"","first_seen":"2026-07-10T23:05:30.558723Z","last_seen":"2026-07-12T22:21:09.034932Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/97173628987b9721.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"607a5dc482c2a5f31bbd9a28d63c0501","sha1":"a656ed985688a740e8db39b9824f3e64e99f7ce6","sha256":"d7a7632132c18a561d9a4c1b9326fee2efe5c5c6a47ff5a970a45ddc37880d1c","sha512":"e55b015be7e1682f7b6f2ba4d046dbbdec12da4c6c1e39bbcc89c5b32d208a586cb98971b195e7e86b529bcbc90b7ba2d58ede1bdfe9dec894929a3b18987d5c","ssdeep":"384:ZLqe0HLShn1OeOpEytUfwNUc59F/pAaVDqx2JEiCr:lF0rVeOpEytUfwNUA/TVDIfr","tlshash":"fec2a684b7a5b03943925291146b141bf279fe2c948c18acf2a0e4f728b69dd94fff74","size":26856,"data":"","first_seen":"2026-04-29T20:31:25.032554Z","last_seen":"2026-07-12T22:21:09.032789Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/8fc516f0ad0caa96.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88e9f365d12e2d7219c1ae029defcf8f","sha1":"5bbf3c6c0543c84a9ac3a32a184bbdd1d0282eee","sha256":"30a0708233831a92e9fce492629c553692c445438e525ce6b7e5653e1fff2189","sha512":"12e3e9587f532e37bf60b610546d575cdf7e21ae9cf662ca15a46e0812e3f291eb106e451d0b9c7ffdcfda18ce122f0a2452feb0b90951b221fb5942f575740b","ssdeep":"3072:aSiYawEAiRhwJtMGQLZ5OaMjpg3AUQ/LmA:aOiRhwJtQZ5OHiwUQ/j","tlshash":"14f328aa33a725334be9829ea4b55200f3365658604d043cf77c9dd7286888b71f7fb9","size":158407,"data":"","first_seen":"2026-04-29T20:31:24.99561Z","last_seen":"2026-07-12T22:21:09.030578Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/ca75922ee079ad4f.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0317ffcdc6ab2fdf9a50554199da8c2","sha1":"d8a4e37f52495584c6cf123c1b9a5d66997a6aae","sha256":"f8998bd4788a69b32ba4936ba4694acf8320fea862967305887196a0c28cdb0f","sha512":"3e60522245b8a400ab51a42f7ff79ad72ba6829fd3e437edc8787375c4cf7f66a0b8a4eedf4106c0569e991489dddb913feddcf9fb580301d6acb1352fd2ccb6","ssdeep":"192:pygrEEQoV97sn+ai8/eTO3kwM66JFwzbgGXofqhSC/J2ktLZYPuFRvNYz:pHrEEQof7sn+j8/eTO3kwKJFwzbgGXob","tlshash":"4b02f355e6581364b88445305e67f01391ee3abf30cf50e8875a86e4f7d689cad238bf","size":9010,"data":"","first_seen":"2026-04-29T20:31:25.017894Z","last_seen":"2026-07-12T22:21:08.996072Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Max retries reached:HTTP error! status: 502","filename":"https://whalewins.site/_next/static/chunks/12ca47415a4bb30b.js","line_number":9,"column_number":288}]},"http":[{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/de7ee0178df35728.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.296Z","timestamp":1783894832296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/de7ee0178df35728.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"3bc2-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6i8iv318Vs5uQ%2BnvAujxr6cWEzxTeeeW8RKedvq1B%2FwPz7pycNX4ufK7fRs%2FGgs6F00euCGlzLXc7gi4ZRJnfslxwBfHaqesJB9mYzqPpsq3SpCzOeE%2FIppY2ZP%2Fvav2sg%3D%3D\"}]}\r\ncf-ray: a1a36f8ddf234e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15298,"size_decoded":6581,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15298), with no line terminators","md5":"85b78b7fe4376c6ff79c855f076271b4","sha1":"2e7d026dd3f7a5ced44716288e0e18714619a7f1","sha256":"ffdb7ef21a68ba6c4533e12c1c3ad07ec1be866818720fdb89310175f0c81d14","sha512":"42bcb3ba5e0fb2c6c2d3ca348921ab91a014755c497fcfc76ee2c21323bfe1921966964fd2285bac20f6c75ccb6fce427ff80453324821d253411c86d7bcfdd2","ssdeep":"384:W7dcz+GQJOKC/K3mIwyy9Ns0ZPBn0s6PUPP:W7mz+JLCiWIwL61g3","tlshash":"bf620afa72d1fdb383a70195843b4006f7281e72145ea4e4e7e9cce6356094e91f2fa9","first_seen":"2026-07-10T23:05:30.606136Z","last_seen":"2026-07-12T22:21:08.993431Z","times_seen":3,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/e62255a0a7a7ad33.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.324Z","timestamp":1783894832324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/e62255a0a7a7ad33.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 21:25:57 GMT\r\netag: W/\"11d33-19f439f8a88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uktmOrr5mqhhtjKxdfQI%2FFCVwWrlZD7eV%2FcJGv8n5IQUGnx%2B5VJltARvpETu1%2FundD48jb6fcrQXv7toetssfkfXhZ1aW%2F0U8NdoDoUd3GtUD4K6q4%2F5myFPcfcaBhc%2BQ%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f3c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73011,"size_decoded":24555,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f43ef3fdce3ab54e7903745c414d13e","sha1":"85824ab4951b3f0ac8ac1987df12a4d117e158f6","sha256":"db38c2b6542b6a2b4d4ac400c99d321faaeb3716b56a1595ca84b7e594949c47","sha512":"5714358ac8acef9f97049fb590c3f2d65a4ac1ff1b9202464e4d5824f8be99f96774a1e0726c6f846ad1b98f4359188fff79a086fda3a9d1ca0ce4696a66bc2a","ssdeep":"1536:APkNLs1JkEYOFPpZT8AXwM6RuQiV5CoMrc:AmOxpZAyP6JiVsrc","tlshash":"1d636d66320224f65bdf42cae06f8605e33915d6900d4014f7ae5c3a6b65fe991e3f2f","first_seen":"2026-07-10T23:05:30.608252Z","last_seen":"2026-07-12T22:21:08.994718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/ca75922ee079ad4f.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.327Z","timestamp":1783894832327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/ca75922ee079ad4f.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 22 May 2026 19:18:45 GMT\r\netag: W/\"2332-19e51203208\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtrPuRPIgo%2BwCujeEo6fT%2Bbz0nubk5WveWTcj%2F%2BPoMw5YxmnegHnnWHPzxQvpqvAhtaMw7cBdWV7bvSITXevKzwWEnbuVBXkBa6rCf9x4Yx9cDfp9LoSAD1C1gVLclq6%2Fw%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f3e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9010,"size_decoded":3196,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9010), with no line terminators","md5":"c0317ffcdc6ab2fdf9a50554199da8c2","sha1":"d8a4e37f52495584c6cf123c1b9a5d66997a6aae","sha256":"f8998bd4788a69b32ba4936ba4694acf8320fea862967305887196a0c28cdb0f","sha512":"3e60522245b8a400ab51a42f7ff79ad72ba6829fd3e437edc8787375c4cf7f66a0b8a4eedf4106c0569e991489dddb913feddcf9fb580301d6acb1352fd2ccb6","ssdeep":"192:pygrEEQoV97sn+ai8/eTO3kwM66JFwzbgGXofqhSC/J2ktLZYPuFRvNYz:pHrEEQof7sn+j8/eTO3kwKJFwzbgGXob","tlshash":"4b02f355e6581364b88445305e67f01391ee3abf30cf50e8875a86e4f7d689cad238bf","first_seen":"2026-04-29T20:31:25.017894Z","last_seen":"2026-07-12T22:21:08.996072Z","times_seen":30,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/landings/first/free.svg","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.838Z","timestamp":1783894832838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /landings/first/free.svg HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"3fc0-199780cd538\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDQo7fmLlIZi8SX3wYmyP33Goe%2FyaLo%2F1H2cj69cFJJ6glFyqkTazAmEo%2FgDTf0Kczf6AjQRAs0WUe28d8jR0dXAuI1B6tLQLeTBrKbQwrS%2BIdk45Y3ggrexuctt6fR3dA%3D%3D\"}]}\r\ncf-ray: a1a36f913f974e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16320,"size_decoded":8044,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1625570a5a1154082807ee0187b1725","sha1":"f51b7dca38015e6c923201a6409fdbdb49d42b0a","sha256":"0acbf775cfb87b921324e379e2429b1c78818dc7661932c17298ac84f0793469","sha512":"6f06c3530cce1ae5d4b7cc75d55b2b2f2c855c85251dedb08e2eb464ea402e171753eb63efb942e5356ecea3051fe0c23eeba548cbe0cc92f8441922465b4683","ssdeep":"192:tr2Lh3d2vUK1nBgqlbki0oTLCxyW89INkYf3G3slrJJUxniJ+ul6miy18yCuDL3d:tYFQgM0gLCxyWuIxW3Qi2Hl6shLN","tlshash":"c572c6cc3bb562f4e489f3e6ef11d0a93c0b11fbaa598a24c3ad4e1c564609d9d48dd3","first_seen":"2025-06-29T12:47:07.127262Z","last_seen":"2026-07-12T22:21:08.996592Z","times_seen":147,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/track","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:36.711Z","timestamp":1783894836711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.5.0\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-a9c3d501cbaf37db-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nReferer: https://whalewins.site/auth\r\nContent-Length: 200\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":200,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://whalewins.site/auth\",\"__title\":\"WHALEWINS: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:36 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36fa97bc44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"e52f018fdb95ccd36487836fc334f0a1","sha1":"7c56a3b8ab60b115b215ba42094c454c460f0730","sha256":"5b97a9da18fba06b7b303a565ae1f5e5789e1bd46ab096dfb508d5b7b5d0563d","sha512":"9d3a7096d87b158c87295dda9f900124d8c4cfaf8936ab71969c0e313e915d01d4759e13c3507a67e6de5848f476b1e27c2b4cf53d040fd13877a10abf353982","ssdeep":"96:1j9jwIjYjfDK/D9KUntG4Fh8/G4FI5K424FdE+skKmtmni17RJlUaQxP:1j9jhjYjrK/Brte+jgVMn17vl/eP","tlshash":"a6d14471b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6732f9ee81a903195","first_seen":"2026-07-12T22:21:08.997219Z","last_seen":"2026-07-12T22:21:08.997219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/0448503e50396d87.css","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.291Z","timestamp":1783894832291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/0448503e50396d87.css HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sfov0feV9o%2FS6MI7Pyyr%2B93%2FiGYPYqeVBrO5r6sGaB1739Fz6rj0uIKpGDhYcLeqDC4liabJEtvOlWu8zKB9dtqzuQidJHzYMX2wlfTOeZZhQP3eV8BqtnYmVEedo2iEMw%3D%3D\"}]}\r\nlast-modified: Fri, 22 May 2026 19:18:45 GMT\r\netag: W/\"2ca-19e51203208\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1a36f8ddf204e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":1029,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (713)","md5":"819b90e168e7e34a6ee2065730485f7e","sha1":"27196285fe756d726740259d7f371fd322b745b1","sha256":"fd03d9d119ffe417e695326109fdb1f96ce27503aab5f4a616c3746d7acd7c7e","sha512":"a68a99ebbdfb80a0db7921bb0c138ebf760ed09affb967a84a1625193eb6a270f1fedba302066bcc7a32643921f3ec0708f82c732f0c1d50d96e585101be0d9e","ssdeep":"","tlshash":"e1012820b249e83abc92f1679b4cfe3d832830705d48495d98cfd72a19c7ffa54a3624","first_seen":"2026-04-21T04:12:27.053804Z","last_seen":"2026-07-12T22:21:08.998171Z","times_seen":105,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/6b8d190f2259e3a1.css","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.293Z","timestamp":1783894832293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/6b8d190f2259e3a1.css HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"62d63-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwk4AcK8NofiXO8xGiXZKu4h12kz2B0Qr11LPlik8WbKlI0coL%2FVtqZVDZ%2Fsxk4RlwQkyYjdPBYIydKsAAEW1HdvDV3Xkc6xftJoJs25v4%2FRB7IIsS0PbN7FssjvQAReDA%3D%3D\"}]}\r\ncf-ray: a1a36f8ddf214e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404835,"size_decoded":49095,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f7ceece14b677695c621c8c90038e024","sha1":"27bd0672ea0f51e8e4823010ca4896b2e1d9df72","sha256":"0296d631197a481f7b355997974a4f5d648130255cd395a3a210c0801a484ba0","sha512":"2ce3fcac751bd9af68cb386e626c9beae1112b4868b68cf8d6bf991ec0e2d600bcc254efa2585a2d2246cbcdffc6f7350f83b6a69a262c993d767063ddc79324","ssdeep":"6144:tG4DL+pazg8c/6x3jchN1a8/i4hfClmcxIgf259A1DABtesYBCnER1NGdXvXYc4F:cCDU7W","tlshash":"38849294f11991bb3e1bb8fda28cf8dcd109f082de764ba9f555522423d3bf36921604","first_seen":"2026-07-10T23:05:30.583679Z","last_seen":"2026-07-12T22:21:08.998663Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/80809a889cc91016.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.315Z","timestamp":1783894832315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/80809a889cc91016.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"d20b-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0YCXgiCKY3UA2bF1s0HX3OJwzSTquiebP9TFJ%2FY1BpvP2VxTrRwDAMBqCvl05oTwtM5Z578iIWWHfIjp7hqEbK0XfQdJlxDihFQmzgO%2B2PQNliSuu4rcgv4U6iKADzt6w%3D%3D\"}]}\r\ncf-ray: a1a36f8dff334e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53771,"size_decoded":16365,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42075)","md5":"616c41d02d91826e2d616d01f2a4578c","sha1":"fc249db40c7297f0dbb0f54ea56b2c0cb005378a","sha256":"0318930890924f968b8bbc8828417beebf7d8eccafdadc29d70dda04f552eb0f","sha512":"4ee0f78d1fb9f63442f3a4a7ffbeec80b0fdaa3fc8a49088003259f79e9bf218d6ff03df3d35a693dfdaca45551741813e6fa9d55ad9305761d02f181492e488","ssdeep":"384:RQ7sdTDDux3v/PsAdl8Uff9j8aB7swEIs8qDhwSvKO6ecNOaK6e2aPKoaKaE8JCD:K4W3v/Ps+8fAQ/D1x1zfeLSuhnCBNlQY","tlshash":"92330b76b072bdaaf37e84d4f40fc014f72e5db9d10f4455a7b96cb5226004892b2bba","first_seen":"2026-07-10T23:05:30.553315Z","last_seen":"2026-07-12T22:21:08.999553Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/7c479c93f750fc1d.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.321Z","timestamp":1783894832321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/7c479c93f750fc1d.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"68ee-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dT20s7LS%2FboU9BdOr6NjNhrXtVkCSJU1X%2F8j22q0NYt4p2JhxDH%2BTXt7L0P2%2BgNX2ZWwLJpv4AObt4N2Uwb8UYgsFJZtncb7rC78msZGOE0hodzhGnaRBx8Mpu%2BxZdsMA%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f394e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26862,"size_decoded":7385,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26862), with no line terminators","md5":"3b642c9f1423d4dd718b789bf8eb3cf3","sha1":"d6de703ce9d8713c36a233f397eee4dbea44546c","sha256":"3237fb43f91caee873a7d8d29a3f8981218a5c832412951a931981a5b631049b","sha512":"869a04e79447cfe647735d933ca3d4419e2f625720160d3b02d5c710c10572d5bfe6ce42488abcd6cf813d46b644c2a992144a4a91936cafa73fdba9fcca7ef1","ssdeep":"768:98qhuxG+2mAMIeUv68P0tA9gvMRlfo1CCEniZIVYCjS2u9a2uS:tyG+N7","tlshash":"93c26954a25c227c78c601b463a3b023e7ae557f35cf6078ca5d49b4b74b85ce2638db","first_seen":"2026-07-10T23:05:30.560434Z","last_seen":"2026-07-12T22:21:09.000474Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.275Z","timestamp":1783894832275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"dc14-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kci0IuQ5jrWYRJWWIOreGR6U02pErJX2pZB4NzrDhUdQl8wboYWgcZ9iCn1D6cD0JHqctWJR5CTBmgeYKrP2r7WFrv4VFJgpelDXrtSRU%2FPtVOJ%2FbErjKnBlYoKhAFzVQA%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf104e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56340,"size_decoded":31303,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"41de6d553ba4b1825e9cf023e97e2ee4","sha1":"c2c26e18339912a10d796aee9a19ce1aff5177e4","sha256":"cd4f7b027bc8e71a19360a426cd694eb195f6fad4142437047f33b312a8c4e94","sha512":"e6b614a65c7441b5a6967df47b1bac808f8966ed8b43446fe91056235b6797653999b9160172b77bc92c2db35e411a1112e97071dc1ca8ee17a7b288357c6fd4","ssdeep":"768:8sVAWXhIU7ifzsuFE55E5bBvQvbKtdE68fjBzPrloGWJ0j32v6w51:8CXV7eQWbTn8VyGWKyv6wX","tlshash":"a9434ba9b316960dd356babc946373b483b0bd3caef3c35b54b1673aed4d0a14c11289","first_seen":"2023-10-31T22:57:11Z","last_seen":"2026-07-12T22:21:09.001423Z","times_seen":301,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/5cdec3f79a4b7eda.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.299Z","timestamp":1783894832299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/5cdec3f79a4b7eda.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"797d-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmSqfyOGovET61etMWqo6X660jcxu74Ac2dUSDc1RNkoZWJ%2Bzx%2FMA5yGFRYy5Kc6bgJeKxDoBmSa0Oq0qd6Mi%2BnVlu%2F8FbMz5ZQzjEVZ6%2Fg5HsEz4bhUsf6LAjRV%2BdvmNA%3D%3D\"}]}\r\ncf-ray: a1a36f8def264e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31101,"size_decoded":9739,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31101), with no line terminators","md5":"bb3dc07d8d69014389ce1c4efbca6927","sha1":"cecc44654838bb0e41829976a6d64afee36f3280","sha256":"b3ae8f6aca10909ea36a621dd2f95924e369da530e488ab4675944255a2f4a20","sha512":"33a87965356e3376625b6ed874cb5159535f22b9f52edfc8dd214981ef184cbfd90c77e3e82572674154258ab469066be8f3ee26c43d2e3cf4dd5db7aa1a437c","ssdeep":"384:8ajTUmukzleEPQKqUd8xfcjCxa+1G0TJTJJQrtgK0/H5JiGUreqe8lYjYvDyWo2D:8ajomuYlMUd0cjCxPG0TvMlqBtC","tlshash":"e9d2a4a971d5f4910b9354b4803f500bf23e1c76296da0e4e3a2cdfab9a055ed133f9a","first_seen":"2026-07-10T23:05:30.549999Z","last_seen":"2026-07-12T22:21:09.001941Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/e8246987071663db.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.320Z","timestamp":1783894832320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/e8246987071663db.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"c9ab-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SY%2B8hRGp8ScbpzaXB4S5hTlxyh0w2Fnwf59LCSS41eTZJnUf5YOFGtmGv%2F9KDwvpNHeUF0QdC%2F8TDBzetz7upOGVmtoNRt%2FgAX76H0QoETbTsQaFStin5CVlkf2aY9jW6w%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f384e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51627,"size_decoded":16404,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51627), with no line terminators","md5":"3e454ad01da01f691c9f79e797b7a97d","sha1":"1b95a12d8980e645e16c43150db10cdb3d7c7086","sha256":"93e2b2514b8e827dea9c7a55df8b4e2ae5d00e11ee10cd9b7a696ff2b2d922da","sha512":"e0a0794a5af1c7256106d19f0747f785226d5140d8df1ee36c826f6eb0cac2030d2e200466df9c4316889dd22ffcd25084ecf77f61d17d2beca2522e38ee2d03","ssdeep":"768:Gboj6J2fmNMBMEHDfjAqY2tpXI6KJxciComGJGSgf5djPH6rx4z:Gbo+qWxEjjD7tksomGJGSgf5djPH6r2z","tlshash":"36331a84f122ec7a132381ed405e284bb26d6e38d51d2d94f3abe47912a49c5747ffac","first_seen":"2026-07-10T23:05:30.586615Z","last_seen":"2026-07-12T22:21:09.002821Z","times_seen":3,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=14o8f","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.848Z","timestamp":1783894832848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=14o8f HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-a843fc059173acf4-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=14o8f\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1BbaMZsoAQ7ECf09%2FwLgid3tvNTxDhZ2xqSA4B%2BhbIrEnn3qKJcdxQou9prFnYRHDwnCPTIFgkWhqG0QGtoJvZgbSZHiD3rmk0ogKxk4c2GJXeAM491nUpLnemwzMuVsg%3D%3D\"}]}\r\ncf-ray: a1a36f914f9e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2208,"size_decoded":1479,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (813)","md5":"ac3c8defa19d439918ba558f99145154","sha1":"0a750a186f83113ff0c3db78177b5075ad68ea58","sha256":"8a325f472b772da18d35e562ae4df25b2442c47a1a2a0e60165ad48d56c43cc2","sha512":"381626f550967579263473dc6092713dc48a2561790cc5944e3dc222a4cb58a7286a2e1f0540f635f4179484ff0bf830b467c44aed77dbaa1efc00657297d872","ssdeep":"","tlshash":"6b419d0cc8095eb498c9d59961e5d7016698bf3bf1b98cace04fdc64429e03d0faab87","first_seen":"2026-07-10T23:05:30.594379Z","last_seen":"2026-07-12T22:21:09.003747Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=u0qsb","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.217Z","timestamp":1783894833217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=u0qsb HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-a49fab8464737d33-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=u0qsb\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BctAg%2Fi%2BrzpbFukTvFqnhdqYGc0fQjK4iomERPoPoHol3PmEFkz8DQjEPBJlv6elJpDtTUHoZGkncUcbGGG02FiXlBrrkOh%2FsswCPAWvgUc2EQqaNcoCUVP2DBVbtVmBA%3D%3D\"}]}\r\ncf-ray: a1a36f93981c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1541,"size_decoded":1663,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1174)","md5":"a7decea29cae59fca43c95fd7a586937","sha1":"00637241753fd087d74ba15995dbec51b70734a7","sha256":"affbeeda989bd7284b4776d964aa371c75777b2f700b8cc4eb3a70bbf419fc6a","sha512":"2185ca2418213905113f7317350498f79a9903ae52a8e70b702e7209db02084646e0297136d5a0f013572dfd703227e7e30cbc53a6a4af39c57c56e67affe787","ssdeep":"","tlshash":"8331ef295908ed8d29a38968187ff309150e167797342d77c75cce0f26c602e5eb0ea0","first_seen":"2026-07-10T23:10:33.623537Z","last_seen":"2026-07-12T22:21:09.004656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=zgz25","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.402Z","timestamp":1783894833402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=zgz25 HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-b1f8c869cee279e0-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=zgz25\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lCmuY2ZlYv6Ku4wsxtCxR%2BDlyA3GFlyjCkV6q8aO8WgPixSCOiw9OeVhWl1QiVd%2FhaLcSKwcnG7fNUliDKuPw%2B4KdWFxmFPQA8aY8SH9s5WrUMsX2vKMEguJMEW%2BU6QVA%3D%3D\"}]}\r\ncf-ray: a1a36f94c8764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3117,"size_decoded":2251,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2729)","md5":"3f003a34cf63630e1c82b03b8cd91a07","sha1":"73fec69c3c2dfc411b8a5fde799e1edc96cec8e3","sha256":"6c22c4ab7a770fecd204454411c5be574b4ebeb0340d5aef86f0535849959631","sha512":"709f12ffc7503270fbf76eb97d90f6c6b9434dcfb2e8cab3eb8768d759d8be472d445034ea0bbc144fc4e1b8d080c84fd06ec92e5facc30241f82445fe3a5839","ssdeep":"","tlshash":"f551307e220aef6c6a770548546dd329636e4a3bf7378db6e2fc5932134a0305a832c4","first_seen":"2026-07-10T23:05:30.605207Z","last_seen":"2026-07-12T22:21:09.005533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/bf7a40699cb93064.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.311Z","timestamp":1783894832311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/bf7a40699cb93064.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 21:25:57 GMT\r\netag: W/\"73fe-19f439f8a88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yaa5YXV4yRzCiy8o8lLLSgsO0DBgB1Pv4WT0%2BjX910fXEJjRHPjGclbq8jQjMcMm4BgbZvrJ%2FLTxeDbA%2BUc5L%2Fa2hOH38d0fIqpwac7zl987%2Bv5sIudntgJ05agtsO6spw%3D%3D\"}]}\r\ncf-ray: a1a36f8dff304e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29694,"size_decoded":11603,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29694), with no line terminators","md5":"0821e25e2b4ea708396b43b921ce0c56","sha1":"aeacaab11f1bc4542d4362e79ba93cf089193861","sha256":"97b0817276db0b2df93c35d1a1284a43f2e503915f0ce5c99a45ead1e8291a59","sha512":"250c252eaf63748316c9283c058e013f87d7d845a85454fd5eb18e9fd781d5d574569fc0d26e111f2c1b24162d51f6f1b8fcf56bf784c7c388e7f0b2e3e6126f","ssdeep":"384:yliwDLoFx1AanV/WchDUxulzI0e5zvx7hyswejAAKP9uEEWS/MnZhpdsoK/OOESb:ylT4/Ba5Z7h7wHV3EWSYPoBjaA","tlshash":"1dd228dcb18174b247e745a5a4bf020af33c592d580d8024b264dcb939b5e8e467bfae","first_seen":"2026-07-10T23:05:30.590851Z","last_seen":"2026-07-12T22:21:09.006496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.277Z","timestamp":1783894832277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"659e4-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3CL3%2BivkHeUKuxqF4LSms6E6SO%2FdA54UovqjtALkJddPTlPpIHt0myROhSX8an7WJjhovjurtj7ucJLequ2FTTW7D%2BX9m17%2F%2BFZR1WBpM9l9PDVoSl7DSh1i1ZFGN2%2B5g%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416228,"size_decoded":203046,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter ExtraBoldRegular4.000;git-a52131595;RSMS;Inter-Ext","md5":"5061bd7701b1b3339f0c80e69a2136e4","sha1":"4a028f1fa4dbd6b4bfbfeec4a5b5e222a005b563","sha256":"3c13487b8f2eba0a78cad4cefd19272b0f4e53d61c223e6b266ddf0b332e9f1c","sha512":"65875f9f205cd70d2e1b86fbda2ac8875637e0b3e0bb37ade9da20717b0f17d2108a0cf2aa1b246affd73bea233b510d37d13193801d94e5148d3ec4159653dc","ssdeep":"6144:3VpTx/VCC2wfBsJWPziKSQVE58IqsfnHGR4tGX5/2nHTAl84RSnj3k4yhT18:3Vp+C2wfBDPziK+4suO49lfR98","tlshash":"38946b23e706db0ecd1a1d3486f5cbd037babca1792ad24bb0593a19cc931f41aa71d5","first_seen":"2025-03-15T18:38:34.528748Z","last_seen":"2026-07-12T22:21:09.00752Z","times_seen":220,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Inter_Medium-s.p.93090983.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.279Z","timestamp":1783894832279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Inter_Medium-s.p.93090983.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"6476c-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nb562EFCvEFF1ZEABwBGfGvyks1mo9NEFVA31noFuY6B7FUIi8E2C6e0d3QVthU3T4VD8uQxoX%2BLVmlqxOfKb5rrPmP0Tw1ezMFxxCW8vx4x9ysAyGcdNzdWY8cti1dksA%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf144e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411500,"size_decoded":201577,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter MediumRegular4.000;git-a52131595;RSMS;Inter-Medium","md5":"a473e623af12065b4b9cb8db4068fb9c","sha1":"126d31d9fbb0d742763c266a1c2ace71b106e34a","sha256":"1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146","sha512":"1fbc2841783140fe54f3ab1fa84e1ded2534bcec3549ade2f513491b32178df515bd63a0a4a2c35017a6850ff9c3a24f8602357d912acf8ca92b8d68ba846d3a","ssdeep":"6144:D0RV3jlWkDOh9oC2wuhsJWPziKSQlRiFy34YmkCD9oI0+msvMlwt5BO2x28YzWDQ:D9SxC2wuhDPziK2yIYmkCCIPmsHI8F8","tlshash":"48945a17e706db0ece562d34cbf587d033a9bc91781ad247b16a3a19ce931b40ad71e2","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-07-12T22:21:09.011631Z","times_seen":261,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.282Z","timestamp":1783894832282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"65118-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8VJ%2BEkvPfcKPHvIO5d5g7vdQ3%2Bes5sJP%2F69GLaG6%2F%2F9jO1YehHu%2B9lXcifG5b1empvHqoZsi5Ot94mdKqDafBxjR2zBz8s%2BNI%2BUEpw4uwChFSHjTv2IdOklgvilwjPyZQ%3D%3D\"}]}\r\ncf-ray: a1a36f8dcf184e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413976,"size_decoded":202491,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter SemiBoldRegular4.000;git-a52131595;RSMS;Inter-Semi","md5":"4d24f378e7f8656a5bccb128265a6c3d","sha1":"d48310d2f04c57af1bce0851e053be7b58b25dca","sha256":"0dc98e8aa59585394880f25ab89e6d915ad5134522e961b046ca51fad3a18255","sha512":"38b18d9786046633e4992308c88f11ca5ced325f805eb29b3000533459e85dfb6cd87655f1e285af8da22ac04722ab354dbda24667297b56cca824ef227373f1","ssdeep":"12288:SMPc0C2wQtzPziKFfAi2bNru42U5CB1c8:5hiK9AiENr/2UYc8","tlshash":"f9946b17e705d71ecd1a2d348af58bd033b9bc90b91ee24bb05a3a09dd971f00a9b5e1","first_seen":"2024-06-16T04:57:18Z","last_seen":"2026-07-12T22:21:09.012265Z","times_seen":262,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/ba25ecc9734175fd.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.312Z","timestamp":1783894832312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/ba25ecc9734175fd.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 21:25:57 GMT\r\netag: W/\"2d571-19f439f8a88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGVioysw1ZdSnlbZpSKm%2FvLrrAaCVrMDQ%2FGnwkLyh7MlrWj6FyLG1iwvyMD20%2BxzRglNTMXvHMs6KC5sPi5zIw6UkZx4IWbM4jDrw8nnfARl6nWrjSzdbr3u%2BDB5JswW3Q%3D%3D\"}]}\r\ncf-ray: a1a36f8dff314e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185713,"size_decoded":61272,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"efe6f38e411a0b73485c5c12cc926d58","sha1":"27254e7cc4cd161b7dd31db168d1758b0e4fa993","sha256":"a0411244cccacda1d5344fb56281ad1f359cb67ca6c0115bef8e3ec6478800fc","sha512":"a7fd4c17074fa22dfa6b6e1cbcaed1bd780300b24a8b417dd9945ff7ec54adf9fe78e856c77acaa4d1901729b499c757249b6cc9d48b3e3d1e18656a14ec3e68","ssdeep":"3072:03XrUl6mGqLHRzfDmIxsfHaQ9t8zfESo1:03Qz7RzfDDeaQ9tJl1","tlshash":"8c041adbb779d0224aea90a5d0350103d33a7b4a6548802cf65eddce35dc94ea277f3a","first_seen":"2026-04-29T20:31:25.01185Z","last_seen":"2026-07-12T22:21:09.012856Z","times_seen":30,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/432cc5adeb7a1756.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.317Z","timestamp":1783894832317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/432cc5adeb7a1756.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"4552-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2F8IshCxf1CP%2B2vuqWsCtQkO3gWyInxPWncY4QivHpUwfF8ZIqaqJR8gAcMh4yVdIGhvs8WXxBn5khdXt3GONYOOYKtv06gV54Hg3zi5eCLECOG6gwVGV5kRJapmpnfSAg%3D%3D\"}]}\r\ncf-ray: a1a36f8dff354e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17746,"size_decoded":7635,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11744)","md5":"b662c6789df2b615886e54fe6c2ea4bd","sha1":"d513f419b13c6b2244670cf4b1af58bcdc64089e","sha256":"760d15c6a0ce16f1d5f35b020fefa49c1a40c5fae1e4539f978569c396c10b54","sha512":"24ef5c17aec85648bb3e41b90c96ef7df8dc03df2e84129f51e674ec84751110eade08701caf730e7666844365deda1628f8f40cabd03e9cb6681bd53a8b8c3f","ssdeep":"192:laiKfRkV8MgRvuSoX+UrlMIJYXxdXz6NntN6MjCpW4W96DULHhWp1eOxZMq7vCNe:ckFOUGcYX76o4W7MLNGLURcOQZ","tlshash":"b582c87571417992f38b0065c22f8815b37e6875240d8838717ea8bf25f1989d1bbbef","first_seen":"2026-07-10T23:05:30.592232Z","last_seen":"2026-07-12T22:21:09.013414Z","times_seen":3,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/landings/first/wallet.webp","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.842Z","timestamp":1783894832842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /landings/first/wallet.webp HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:57:59 GMT\r\netag: W/\"6906-19b7b5a5fd8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtbLLAF%2Brr5YXF9n5e31GAXwNiru8RrIXit8ue0%2B3Ei7G64NPQhiy3B846taXb5lt%2FOuMN%2FK2b6NKobCYeCVLrpcD%2BSYkuJxVWsBcDRRfD4v2A2mvq7fa31hA8%2FPCNL%2BRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a36f914f9a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26886,"size_decoded":27612,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5faa17e7f16c8c5a2948e488f45ad357","sha1":"1565b7efa14973c47f33ea15dbaad794e74fdeb5","sha256":"bd06b9f303d8397dfe6270c0c5cecdc530b2e3ec87a1517d3ea719a422a84c48","sha512":"a3763fdafe2bc1f5409a87fdb95fde50c975fa4fa6a4b6916ffef7e1bb1d8a1ca733e915072705a0462d46ef487148c6103d808582944ae73a773acb13359de6","ssdeep":"768:HMcx2S65sXKP128FI0W91daSxMq7oRU6pLbHc:HMcI6KxFI0atMq7oRU6Ljc","tlshash":"ffc2e11f2fbae964f63ecbf4c1d513c3428944e4ac6e4aba5543ca01fcf2236595a2c5","first_seen":"2026-01-31T21:10:03.108594Z","last_seen":"2026-07-12T22:21:09.014633Z","times_seen":143,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/track","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:34.637Z","timestamp":1783894834637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.5.0\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-a70b04bc4b5b3d51-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nReferer: https://whalewins.site/auth\r\nContent-Length: 200\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":200,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://whalewins.site/auth\",\"__title\":\"WHALEWINS: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36f9c79a94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"7ebce6132987931b34305b0a84206047","sha1":"988fec0899f14785789fb81aa8a796a04a33972a","sha256":"c746435bbc3639a68e989f48a54ae69f366c29f0845265b136035edc58f940bd","sha512":"22c18a9366e6df61c3ade7afee6482cdf89e0cd272119b9d785ce0ebfbdf0ca37ac37fc58eece9bf9fbe78667627c63226db2d5ee3a7a5adebaf16827ece871f","ssdeep":"96:1j9jwIjYjfDK/D9KUnPG4Fh8/G4FI5K424FdE+skKmtmnir7RJlUaQxP:1j9jhjYjrK/BrPe+jgVMnr7vl/eP","tlshash":"73d14471b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6731f9ee85a903194","first_seen":"2026-07-12T22:21:09.015246Z","last_seen":"2026-07-12T22:21:09.015246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/3431dae953ab2c59.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.310Z","timestamp":1783894832310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/3431dae953ab2c59.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"1167-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvEX3AsWrb7i2Sy6hgCk8HSua6N3nzA%2BM2JweUM1Z72E%2BwEB3mJvu2EM3E8wQjJFnghf4PdXKs9CN3UrRgA0awJ29CMykBHrIcJBIryqLbxW3UeMgvnWJzngWIddmuzYHg%3D%3D\"}]}\r\ncf-ray: a1a36f8dff2f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4455,"size_decoded":2697,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4455), with no line terminators","md5":"294f91ee2d9adc7ee47d4765e0807d2e","sha1":"1a1ddf37033549a06eade8456899969eb88c6257","sha256":"63a1461c6b456d475f933dad1ccbf33d825027c57b9ff98acdaa1972dbf5e8cc","sha512":"e82ba48b057268164f1f64946345413a2ef8931e48225ab36d4dfce1a8fab9eae7eaceaee2decddb6be8be14a20fe4536782fbc4732528d5e231e22bb38805fd","ssdeep":"96:mctuv2SKkfARZ0kqJFv2H43uuqoE91Y6kqdYqiEAX2v2P:VScRCkqJFezuwg/jlXxP","tlshash":"919185b230a0f0d0d29b4185852b481eb23b2d3d609d70b497f98cfd67e544de6a2f9b","first_seen":"2026-07-10T23:05:30.589949Z","last_seen":"2026-07-12T22:21:09.017339Z","times_seen":3,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/domains/landing-image/5e66bfbc-1100-4f25-9814-fbd041784246.png","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.337Z","timestamp":1783894832337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /api/domains/landing-image/5e66bfbc-1100-4f25-9814-fbd041784246.png HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"229a59-fCwIwyxGVXXmDeFcpMU/Q4AF+Oc\"\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GKO6YxAsH%2BaUMjdNOGl1K%2BMSec4m1WpV5XmK5gaq5qRJ92k%2FhFmtODex5pN9QLH%2BqHevlLlT0D3LtizoBqcGenybhmUNJJ%2BI2jhBaV7Hyq9iVmza9Sa%2Fy58x4EyeMT5VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a36f8e2f444e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2267737\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2267737,"size_decoded":2268475,"mime_type":"image/png","magic":"PNG image data, 1198 x 1313, 8-bit/color RGB, non-interlaced","md5":"dbaae26b15e0bb3317e1cac8987b1d9e","sha1":"c33c1964c41b96bf4243f7dc73197bc36ff5bc10","sha256":"2e87c15d5922b270f88190ea8721fd8b37e1ed4c0be2ae2006675087885f557e","sha512":"4348e734cf6040cb82699807f24691148509f062f5268defc1eea799106506e0e550ad76f9f610b13f7a7ba4e3d3770a1f1263ca25e0b585e6013a14a8bb7536","ssdeep":"24576:SLwLb8mbIZVfq2aPuXR79eGds1GAG8oZTC+mNJQ15M/smu:YmbIZ5CPWveaHlC+T6ju","tlshash":"be2533eb71a8b184c3d947b552d86e1fdc1f83812881134d5c83a9a2378ad9df6d11fd","first_seen":"2026-07-10T23:05:30.613212Z","last_seen":"2026-07-12T22:21:09.018686Z","times_seen":3,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/2/envelope/?sentry_version=7\u0026sentry_key=undefined\u0026sentry_client=sentry.javascript.nextjs%2F10.50.0","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.643Z","timestamp":1783894832643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=undefined\u0026sentry_client=sentry.javascript.nextjs%2F10.50.0 HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://whalewins.site/\r\nContent-Length: 459\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":459,"data":"{\"sent_at\":\"2026-07-12T22:20:32.641Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.50.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"a107debe7bde4c1d8682c6cc7a7b0251\",\"init\":false,\"started\":\"2026-07-12T22:20:32.573Z\",\"timestamp\":\"2026-07-12T22:20:32.640Z\",\"status\":\"exited\",\"errors\":0,\"attrs\":{\"release\":\"web@3.3.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36f900f774e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"344db0b70bdeb6b4b1b80349dd05a0c8","sha1":"73c5ff090b879e74015c906838ca4b88c8e112d2","sha256":"4ac875bad8372de03daae9e5dd961c67b8a731419ccaa0791aeb79dc50047ee7","sha512":"8e21411345a03d600401814f672159bbd134dd71b0f16345170006b9236b348555005b535be5ba5dbb754842162680a6afab794a6fc31f382af0178a34d43d65","ssdeep":"96:1j9jwIjYjfDK/D9KUnRG4Fh8/G4FI5K424FdE+skKmtmni67RJlUaQxP:1j9jhjYjrK/BrRe+jgVMn67vl/eP","tlshash":"add14471b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6732f9ee81a903194","first_seen":"2026-07-12T22:21:09.020008Z","last_seen":"2026-07-12T22:21:09.020008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=ebgye","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.220Z","timestamp":1783894833220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=ebgye HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-ad07d9a3be75f079-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=ebgye\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmLe0DD7MJnK3bfsuJipCLJbKGeEWgKrLFHQ7agwLxakPoQwJp3OAREbCUy%2BQGWEdQgnVVv1N6AkBS3F%2FMazc8RzF%2BI%2BMcMFMqpjzyCnWDok7nzDzaSiCFyL7mx%2BLuBEow%3D%3D\"}]}\r\ncf-ray: a1a36f93a81d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":2340,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"db8cc6d922f9c453e0dd3a8ce31fa4d8","sha1":"84f4fd52faaccd303df3dba9b0179ecf9a9af916","sha256":"00f8fc6ef69ca3c043307a0feb3509cc2b78bb9ff61358962a18a17ec078f078","sha512":"f3814c06fd66753e33141b5ba7aff2118ff5422505256ac9260060c32ce092aa26b613e9a82ff6938ba99efe92d934d2bff8eac40e656382153f6cd0b2bb0167","ssdeep":"","tlshash":"9861203e120aff7c6a274548545ec32a626e4a3be7368d76e2fd4972034a0345b872c4","first_seen":"2026-07-10T23:05:30.554385Z","last_seen":"2026-07-12T22:21:09.021048Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/2/envelope/?sentry_version=7\u0026sentry_key=undefined\u0026sentry_client=sentry.javascript.nextjs%2F10.50.0","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.648Z","timestamp":1783894832648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=undefined\u0026sentry_client=sentry.javascript.nextjs%2F10.50.0 HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://whalewins.site/\r\nContent-Length: 454\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":454,"data":"{\"sent_at\":\"2026-07-12T22:20:32.642Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.50.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"3bd0e1bd685e45139107ba1352cf7fcb\",\"init\":true,\"started\":\"2026-07-12T22:20:32.640Z\",\"timestamp\":\"2026-07-12T22:20:32.640Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"web@3.3.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36f900f784e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"4d1f47a6501da416127361a9c20f7b24","sha1":"481098f65930c2e8a11c648b568f2b66c7f942b5","sha256":"81167093e113d38f9b614ed4a9779eb6266885b59479bc5fa812e71177809b09","sha512":"749ebe9e449a589d442b501bf23a9fb27adf194dd4843fba9f9a6debd82d814fe9cb7fbd1e8072d2718ce0dbb47a03ffd444cbfbd009b6dda1e851cabbcf911f","ssdeep":"96:1j9jwIjYjfDK/D9KUnRG4Fh8/G4FI5K424FdE+skKmtmniZ7RJlUaQxP:1j9jhjYjrK/BrRe+jgVMnZ7vl/eP","tlshash":"47d14471b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6732f9ee81a903194","first_seen":"2026-07-12T22:21:09.021659Z","last_seen":"2026-07-12T22:21:09.021659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/track","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.850Z","timestamp":1783894832850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.5.0\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-8c81fdaa7ce90e9e-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nReferer: https://whalewins.site/auth\r\nContent-Length: 200\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":200,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://whalewins.site/auth\",\"__title\":\"WHALEWINS: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36f915fa04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"638a9977f501df768abb1cf01d8ed954","sha1":"71502962893f628396ab6eb2483a218052aec04a","sha256":"bebf980633fe76fb976f89b1eaa9a207503d4433298b2bf184001f5838b97ab3","sha512":"245429f25ea21d5dfed2ac53b56c2185d4238e9976e23838307c42e3fbea04ddac052f9a958ecfdc65df081b48382612298319cf12a7cf5975e0aa38a102f1b7","ssdeep":"96:1j9jwIjYjfDK/D9KUnRG4Fh8/G4FI5K424FdE+skKmtmni17RJlUaQxP:1j9jhjYjrK/BrRe+jgVMn17vl/eP","tlshash":"08d14471b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6732f9ee81a903194","first_seen":"2026-07-12T22:21:09.02379Z","last_seen":"2026-07-12T22:21:09.02379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/track","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.560Z","timestamp":1783894833560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.5.0\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-81dbb34268974c2e-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nReferer: https://whalewins.site/auth\r\nContent-Length: 200\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":200,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://whalewins.site/auth\",\"__title\":\"WHALEWINS: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36f95c8b54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"463f21ba7031d0bbba94dda310cc682d","sha1":"820c7514e64328bce9b03843d87f2e871f6e620b","sha256":"8e89dab764396a301c142fc13c9c2b8ac661f3ff9069a1313eab47d813ac9d7c","sha512":"7af6890c097e3a761918f84dde811dbbfd9c1a22e98dd50b1d8a4c6aeadcc5e42aa73fe012bf53ce356da10657106dd2d3e50cae6f51e72dd982c05678968838","ssdeep":"96:1j9jwIjYjfDK/D9KUnGG4Fh8/G4FI5K424FdE+skKmtmnid7RJlUaQxP:1j9jhjYjrK/BrGe+jgVMnd7vl/eP","tlshash":"dcd14471b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6732f9ee81a903194","first_seen":"2026-07-12T22:21:09.02536Z","last_seen":"2026-07-12T22:21:09.02536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/a85c5f2112ae0905.css","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.295Z","timestamp":1783894832295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/a85c5f2112ae0905.css HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 21:25:57 GMT\r\netag: W/\"ce7-19f439f8a88\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YakF1YzOxQCo3vbQ8kepd5AMpmGPxGUxT6jv0t9rGQkjoOVEQjyfgsU5z9e9nny3si7Xfo7Uk2ucEGGn6kjJUvkmLJPRFWMqBlDpEGCOk7imyBGzJbT%2F%2BmEJBINX5onh7Q%3D%3D\"}]}\r\ncf-ray: a1a36f8ddf224e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3303,"size_decoded":1538,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1085)","md5":"e0eae693638a4faffd4c9f557a7438b1","sha1":"6bfb8474afb2f4ba719f35fe3dc2aef001107552","sha256":"5d3675b31c9a19c7c528d457f5543f31e62ec5d85f076f8de0ca5ecc8bb47367","sha512":"3843c89db03ab7a8f9e518bd9e9590c414ecfcdf24e6eb6ae8ef9da51dbf37c9bebc3c1e08072f7cf75ed6b5610766e024574425042890a0d93396e2ba46ddfa","ssdeep":"","tlshash":"e8617510011e923ad8b59d97778e3fa13ca8bc90a5795d23e5290d2d8ad7c7b13f0f29","first_seen":"2025-11-23T22:59:50.498332Z","last_seen":"2026-07-12T22:21:09.027254Z","times_seen":217,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/12ca47415a4bb30b.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.300Z","timestamp":1783894832300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/12ca47415a4bb30b.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"83744-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkPncloJMMLxTg2Q3MSngaYQEC3CUUGLYnuxOVBKD0AHVjgWEXx2kkTBnll6kRK10q0AxiysXh1BBqyLVge3gsRnw6ru3GhecOuiQToWg4AGlmpQdxQfdueWK9OL24Qk3Q%3D%3D\"}]}\r\ncf-ray: a1a36f8def274e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538436,"size_decoded":168013,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55789)","md5":"a8813508e45a53ec2c4dd552323d8286","sha1":"54cbc1c1db6902d3ff08a44167317cd4d2e73b67","sha256":"1aaf0c6c1572264415a71bc14bb558087aa928aec4ce8a65075d873b8e04a937","sha512":"3b76b2ed935a79d08cd9241cfff03b845aab58c6fb304944f519617c4428ab2a8800992fe8a257a1141c38ad81070ec69d3fae53ef1bd38a0dd5b5b5751d642b","ssdeep":"6144:da2b81orRHq4wMkpAZW1jwR5tK8bceP4LrUHTQM9bDjXCdQ:/F0AZW5wR5tKrD09bSQ","tlshash":"2eb44bf93695b1335ba602a6407f0002b3785a6b240e4864f365edde74b844ab1f7f7e","first_seen":"2026-07-10T23:05:30.556655Z","last_seen":"2026-07-12T22:21:09.027934Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/75771e30eacdc68d.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.326Z","timestamp":1783894832326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/75771e30eacdc68d.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"996e-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Un%2Bohn0GQSdRqk%2F5tpWgp7DNcytspKymRRKJatEJOQkL%2FT2qCZCPDG1LMB9R3pgp8RTtDG1flqcXaMdBKiwv5WY4xkSBDWcpYDaa0b91JyXhssOw5XdA3uf24tgq0UHGaw%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f3d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39278,"size_decoded":13992,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (39278), with no line terminators","md5":"9f52d0f95b9b78fd3357b53c2052cf3d","sha1":"2b85dccdc9d9dc8e5e51c8d68a774ce1880d37af","sha256":"5c0df958250d44248717bb5352895d6de8245bf69a57340ab08b21d42345c6b0","sha512":"51be996959f3a8b906205fd1a0b41bdb4bceb371af32a8b3a4a0652a1b46f3cd47f408c0f610d6cd0e0af3976767820e50d86bc7f103ebc2a3e7374102efb442","ssdeep":"768:XgutAd+52/4a/CWcW2UqyAGCegDMSHAT4fjt:jtAs52/4aFcdUq9GCegDzHATa","tlshash":"fc030ae87251b856c3da4199c0de8a41e13a49b9100d453db7bd9cfb2831c8d62fbb7e","first_seen":"2026-07-10T23:05:30.611038Z","last_seen":"2026-07-12T22:21:09.029412Z","times_seen":3,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/8fc516f0ad0caa96.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.307Z","timestamp":1783894832307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/8fc516f0ad0caa96.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 22 May 2026 19:18:45 GMT\r\netag: W/\"26ac7-19e51203208\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCL4YvgNMerl5utUsUWI%2FfhI%2BSMT50ry7aiT39Oq1rOc7hcLKNvDpsc9Thxiek4ArbVzkl%2FIxhwEm2x%2BnGwXlz6Gkui%2FGadPWeSZVzA5Wdz1oKAJL%2FnEGhcrxNU39%2FcWhw%3D%3D\"}]}\r\ncf-ray: a1a36f8def2d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158407,"size_decoded":48373,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44086)","md5":"88e9f365d12e2d7219c1ae029defcf8f","sha1":"5bbf3c6c0543c84a9ac3a32a184bbdd1d0282eee","sha256":"30a0708233831a92e9fce492629c553692c445438e525ce6b7e5653e1fff2189","sha512":"12e3e9587f532e37bf60b610546d575cdf7e21ae9cf662ca15a46e0812e3f291eb106e451d0b9c7ffdcfda18ce122f0a2452feb0b90951b221fb5942f575740b","ssdeep":"3072:aSiYawEAiRhwJtMGQLZ5OaMjpg3AUQ/LmA:aOiRhwJtQZ5OHiwUQ/j","tlshash":"14f328aa33a725334be9829ea4b55200f3365658604d043cf77c9dd7286888b71f7fb9","first_seen":"2026-04-29T20:31:24.99561Z","last_seen":"2026-07-12T22:21:09.030578Z","times_seen":30,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/e4314985ea6f7a15.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.298Z","timestamp":1783894832298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/e4314985ea6f7a15.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"80a1-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjyW%2Bi8s7KooCPGPJIOvI2m9SFLqXzLGXcwxZi1yF6YbCus8L1Zn041kWZWhC6GsLVfsB2Bc7B2EsTfZlCjGaWegHv9KAMudwEnnHYLAaq3F7V4utnvN3W%2F7qUm9ZpvSbQ%3D%3D\"}]}\r\ncf-ray: a1a36f8ddf254e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32929,"size_decoded":8007,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19162)","md5":"62a985c902731822aec46c6feeec1c7f","sha1":"0b6b1cc0e99f8ab390a68082eb148ef28eae9569","sha256":"10f415abe906083dfe292528d86b585126a75978ccf8c670b3fd30236899fab9","sha512":"797d7fa15aaf2a83907579ec93ceba65a21d3158fd405d3e8e279c65e21e7ae4ccb9d7862b5188db6e77e1c3f62d1ef725e78be8c55eb74be3681b1afa88fdde","ssdeep":"384:8jrhDGGRuBURuDrTfIVZ/X+C90mkdG4+Z47a4SwToGFJl:rBam/8Z/X+C90fMzZ47ac3","tlshash":"b6e2d6b572d5faa2128341f0c43f2017f2684c7521ac7470a7d8cc9fb65888da6bafd9","first_seen":"2026-07-10T23:05:30.547568Z","last_seen":"2026-07-12T22:21:09.031188Z","times_seen":3,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/0dee93c023b9b159.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.302Z","timestamp":1783894832302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/0dee93c023b9b159.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 22 May 2026 19:18:45 GMT\r\netag: W/\"f64e-19e51203208\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJpK69SIPxXWbvb2%2FABJPGt1FAzeKeJgYOquKkMnmxJ%2Fm1oG2y03a0wLUEl7qdf2nQFOA%2F15GI%2BXls251psZV7kNwR%2BRiC3%2FaBNKjDVqfpwUGDpNIgFLRaKOvKAZcaK1pA%3D%3D\"}]}\r\ncf-ray: a1a36f8def294e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63054,"size_decoded":21209,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36561)","md5":"7d2afe459b297a1330dcb7a74cad3810","sha1":"7c6d199d3159bd0c518ce1fe356d87840dd97a9e","sha256":"06f92771eb55ea89c6b7c4f04e2a8f89a20f94b4257bf7606897bfb141d62d24","sha512":"8d5dc8bf279b949c8e6cb55177226e576f7821f145c92ae75d85ebb4194a5c867f5c0c91fd0fa2d854c20ed647c6aaaca6cf8a685b69cd0b43146e5137b54a2c","ssdeep":"768:67uTrZoR7BBAMBeVdIDlGmvlJuIHtXUqJWPokCEnLVXQFlUs4IKd0YW+E+S:ZFMBxPcIHJUqJeFXElUs4IKd09+vS","tlshash":"a053d9e57282717117ab0225907e4006e3b94dd0104e8138fe6dd9ee3ae549ab2f3f7e","first_seen":"2026-04-29T20:31:25.010352Z","last_seen":"2026-07-12T22:21:09.032236Z","times_seen":30,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/97173628987b9721.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.314Z","timestamp":1783894832314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/97173628987b9721.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 22 May 2026 19:18:45 GMT\r\netag: W/\"68e8-19e51203208\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydRk%2BYr3VCuuox5LR8qVLu5xRMuqwSH842TBSDG3uNMin1W9lJq0U33PH4YxsXVPKxR8pkv5vZlSBFv6rR7xW44ryoHIp3E4Oh%2BW0typ3LBKtooNv1ZSuoN34iqaD9TLFg%3D%3D\"}]}\r\ncf-ray: a1a36f8dff324e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26856,"size_decoded":8907,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26856), with no line terminators","md5":"607a5dc482c2a5f31bbd9a28d63c0501","sha1":"a656ed985688a740e8db39b9824f3e64e99f7ce6","sha256":"d7a7632132c18a561d9a4c1b9326fee2efe5c5c6a47ff5a970a45ddc37880d1c","sha512":"e55b015be7e1682f7b6f2ba4d046dbbdec12da4c6c1e39bbcc89c5b32d208a586cb98971b195e7e86b529bcbc90b7ba2d58ede1bdfe9dec894929a3b18987d5c","ssdeep":"384:ZLqe0HLShn1OeOpEytUfwNUc59F/pAaVDqx2JEiCr:lF0rVeOpEytUfwNUA/TVDIfr","tlshash":"fec2a684b7a5b03943925291146b141bf279fe2c948c18acf2a0e4f728b69dd94fff74","first_seen":"2026-04-29T20:31:25.032554Z","last_seen":"2026-07-12T22:21:09.032789Z","times_seen":30,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=1n77j","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.221Z","timestamp":1783894833221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=1n77j HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-b4f03f23f0891312-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=1n77j\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9iHICi4OebUVcKhZkmx3oeDDA3G9eglZStgdfVmk7KoIOOEeFHL2YXQ%2BybyYc4%2FlubVPbcovvxNulIv1mglb7kdQiK4zJhXdFtHTJiNaRfO%2F56mfVVDC4m46y1z0IcHlw%3D%3D\"}]}\r\ncf-ray: a1a36f93a81f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":2336,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"db8cc6d922f9c453e0dd3a8ce31fa4d8","sha1":"84f4fd52faaccd303df3dba9b0179ecf9a9af916","sha256":"00f8fc6ef69ca3c043307a0feb3509cc2b78bb9ff61358962a18a17ec078f078","sha512":"f3814c06fd66753e33141b5ba7aff2118ff5422505256ac9260060c32ce092aa26b613e9a82ff6938ba99efe92d934d2bff8eac40e656382153f6cd0b2bb0167","ssdeep":"","tlshash":"9861203e120aff7c6a274548545ec32a626e4a3be7368d76e2fd4972034a0345b872c4","first_seen":"2026-07-10T23:05:30.554385Z","last_seen":"2026-07-12T22:21:09.021048Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=d60s0","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.417Z","timestamp":1783894833417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=d60s0 HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/landings/first\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-bde5740893306ee8-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=d60s0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GndMRL2MWPLcGwLKEgJileduJ8bUZcCTYb0XtqRyRg84PIVE38b8Faw7NA5NdeSVrAKVNAhkeRUODQo7vUI%2BBieCOWjPgcbcyFO%2BswuBgczazlhDvvzJxkLvTX19ZsYQ%2Fg%3D%3D\"}]}\r\ncf-ray: a1a36f94d87c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":1228,"mime_type":"text/x-component","magic":"ASCII text","md5":"b5d6451ee556cca1163f224608357ea7","sha1":"c117b1abb37fd479629d57d889c68301ca7ccfdb","sha256":"55f3248f7c7629a08d55c4d8808f8d23a15dee5794c62625a9e05a5830002d6a","sha512":"7e9ccd04f3d19a356da728c689d49c2d8d70d3aaaef6e2020b21ed94e6997e21af450fe04493c26ba299045d3f58c21ace61343e78351ff2a83ce8419e0e7984","ssdeep":"","tlshash":"53f097a7a60edd282d31cc4d2cae331a825e4c3b9a3868f8e34ccd5d0285926078a1e4","first_seen":"2026-07-10T23:05:30.614305Z","last_seen":"2026-07-12T22:21:09.033337Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Roboto_Medium-s.p.caaade52.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.287Z","timestamp":1783894832287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Roboto_Medium-s.p.caaade52.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"292c4-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejlHoJnj%2FvD%2FSH9OPSzFRTh%2Bv8RT0NPcCOpJDSIMQ0BUhourtOjUsKTxjIZUqehZEHp6zI3tOXDJIX7LOOjCztPKy1JYcAo6olXiRSZkm4IJlkrv139niEm53CXvUnZBUg%3D%3D\"}]}\r\ncf-ray: a1a36f8dcf1c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":91869,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-07-13T16:29:12.331986Z","times_seen":2019,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/4db91becd628b915.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.323Z","timestamp":1783894832323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/4db91becd628b915.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"65c69-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgbWVEU3%2BQe%2FZRs4QXKt1EAWavlljv4FXl4zM09QVQZvhiz%2FzJ46xc0iC%2FwUrSZLZ%2Flc%2FGi9lkh3Ia3rnAyKQRIcMADhbysOIWVSRs%2B6rDmJofuzhYRhu09Ya3kiC7uZvw%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f3a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416873,"size_decoded":125455,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bab7bf7c7771355c471983e7b5d90476","sha1":"d068273d89a9493df9cfa48ff29a78b041585465","sha256":"480a8f7f974e9fb6343c3914b04227a4e97df7aa6dc1091173a6d17033b33319","sha512":"fdf4a2d159e24e66c22cb952131516f052740e933af8a140dcc25675b32d0587b2d26f3744f3445e0caaeaaf7a47d251de56cced73fd7a62337e702269fe79a7","ssdeep":"3072:jeuxcvbX1azYazvbQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEe:jeuxKPjV2ECNvms+lPnjz6f","tlshash":"ef940888b760b022835665e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf38","first_seen":"2026-07-10T23:05:30.558723Z","last_seen":"2026-07-12T22:21:09.034932Z","times_seen":3,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/landings/first/login.svg","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.763Z","timestamp":1783894832763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /landings/first/login.svg HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"57f91-199780cd538\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XL4Aogljgk%2Fx4XelrNllTVWced%2BI8B4ov0dHHXLk0lG8ElLbyG4xd2701KyCwUEN0wG2Gv%2FFKlO0kiifo%2F%2F0XfJSVuH6o4Ub%2FVFS3sMuHZqkR8BU93pnrpAbYiBsJUWiBw%3D%3D\"}]}\r\ncf-ray: a1a36f90df904e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360337,"size_decoded":271635,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dff1da7410d1fb9ff9cc3c60985faae9","sha1":"43e73964e47e37a76656687d9b15ff652bbd0b9b","sha256":"634e6f48dc85ba967e2cd5280e6cb6fdc92a9ecb9985d45dfd3f51bac90422d6","sha512":"928d2a5e108fbee0b7455458f8314eae51d71dac91aee890d95d48fb6ef6147628fd074506ece8eab7ac783c8223024f430e7fa8dacf51357a0e2ffa4b83f80e","ssdeep":"6144:6hmnYsyos2Hd6gCnrQSnw/vYkcYnTd/7C9njnFrI4CzHxzGitZb2/IYNhN:omnlD9d6gCnhwH5p+9TFXGxqit5ifNhN","tlshash":"a9742360788abcd6c37ccf2163ae8f6701f945ca8646e4de85d435878858793801ffae","first_seen":"2025-06-29T12:47:07.083384Z","last_seen":"2026-07-12T22:21:09.035914Z","times_seen":145,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/landings/first/money.webp","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.845Z","timestamp":1783894832845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /landings/first/money.webp HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:57:54 GMT\r\netag: W/\"837e-19b7b5a4c50\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDqiat%2Bc9%2BIwgQwTPsN6wCk0gRaV%2FQLIq1VZCrM45i2%2FwxZwyxnDxB8y%2FBQGIDWu0BA9yFe%2FXiclQMWOyEVpmombtIwkcrmHSItp%2BJMTGWqb0wcod0HJBGc4qhhr7fDozg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a36f914f9c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33662\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33662,"size_decoded":34388,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c8380b05a73696008a115aea0a83f8c","sha1":"4200bd3c320936978aa52e983602178ab5055f7c","sha256":"6d3782747fc16f2f72af83970082c3c7e6171d9c816e891277dd7eb50ae3324e","sha512":"4c892e950de57d0c9296df9c1a23ef3eb6bee3d26e8bf16fe1c2fe79e57b0b3ddcd8af8da41ac0cb08a2a713030e029078b8bed4e4d96bc79b4fe671f344f498","ssdeep":"768:3wrWW4Rh3HcOCN61FP8bqOpEAm3L4HHD5SxUV2BZ+AEnf/:giWG3HcOCNEhorCAH1SxUV8ZdU","tlshash":"21e2f2e7f8daa09de983fe648f34423553a6d493260f454e4289dc252d88ac4fd0db87","first_seen":"2026-01-31T21:10:03.12359Z","last_seen":"2026-07-12T22:21:09.036559Z","times_seen":143,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/turbopack-28ccfd079c928467.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.304Z","timestamp":1783894832304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-28ccfd079c928467.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"2853-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twVKB5LmolCj4MqFgXUsKGnWU3qRltdYbyPJtDP3gN0KeGeUsC5R%2BU9e7RXP9xxqXOgmbmCJ%2FXjCYZ2qj34u4qOiXvqjLp4ch%2BxzsBfrZ%2FrArhg7BjosuvUQ9Weu0EbLLQ%3D%3D\"}]}\r\ncf-ray: a1a36f8def2b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10323,"size_decoded":4824,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6484)","md5":"3d52be174726618cb2f0809bb8a4f79e","sha1":"b35f000af3ea40dc1458861e5d02f7aa6ca9a367","sha256":"8e6fa881466475ec113f46d1dcffdb952964cc69956180bef8625403866c154a","sha512":"8346785281492a3664dc84f885f212d649d121a920555908cbc5b89dcf230e2bfd63ef8fdca7872bd18b907e3e2e92d2c3bc534fc505e86373a9d27a75e9a748","ssdeep":"192:1WTzl08YEsUnU91E4dn2Npl/daXMh6rW9xocxkUk1MsS:1WTzvy0bl/A1aroQZ","tlshash":"0522d7da37a6f073436fa1e6807f0044f17944a9142d582c93aca8fb38354ae49e3f67","first_seen":"2026-07-10T23:05:30.593356Z","last_seen":"2026-07-12T22:21:09.037132Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/a3c3bd62e90e194b.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.318Z","timestamp":1783894832318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/a3c3bd62e90e194b.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"a49f-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ke%2FL0ogCrDbciTJOJOHKwNDUVcC2BsyOcL3SXCDVKc2SZj%2BDN9QiR4rLMiyzOeVVU07g24gYfA9cUMPIvABksqwG4iyyxIXF1wacLuhyb6byyHFn9LajCfOurQBV94pNg%3D%3D\"}]}\r\ncf-ray: a1a36f8dff364e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42143,"size_decoded":12293,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42143), with no line terminators","md5":"5894a6f7fd06062e6092e723045cd726","sha1":"8ef276581a64fd7195a29d7a2648f8c3cb59b9d2","sha256":"878ef5bfcb188e2e13aeecd155a296c7fc3b56c3b2b6f723acbb70d5359e880f","sha512":"cccd7c2f2435b7142136ec58d82a625bd43d54e5c4f6e6795a3f4b95d82db4fe2d72a84a3832886717050546a4313a7fdca86485d71eaf698ad0da5bf6b70b56","ssdeep":"768:HqaCHHZgKIgrBvnKgApILOH8nAmHaPYzLSL5KaG41fPWecxzDrfNljFKux7B:KaC3rgALOcAJYGaWPWecxzDrfNljFKuP","tlshash":"c413f7903160ac75de5b46fe70dec40667bc2060d8195820b2be6cfe139afd57762b8e","first_seen":"2026-07-10T23:05:30.548722Z","last_seen":"2026-07-12T22:21:09.044886Z","times_seen":3,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/api/2/envelope/?sentry_version=7\u0026sentry_key=undefined\u0026sentry_client=sentry.javascript.nextjs%2F10.50.0","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.576Z","timestamp":1783894832576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=undefined\u0026sentry_client=sentry.javascript.nextjs%2F10.50.0 HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://whalewins.site/\r\nContent-Length: 454\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":454,"data":"{\"sent_at\":\"2026-07-12T22:20:32.574Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.50.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"a107debe7bde4c1d8682c6cc7a7b0251\",\"init\":true,\"started\":\"2026-07-12T22:20:32.573Z\",\"timestamp\":\"2026-07-12T22:20:32.573Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"web@3.3.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a36f8f9f6b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6402\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6402,"size_decoded":6856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"68954614ba00b4218a329112a03673ec","sha1":"91cb43e484265142bdd4a3c9325e415920b076d5","sha256":"98792c60ceddba9aa9725c280546598329b42d963e0bae1ad789b69c8d54d653","sha512":"28e7ce6cbb9039b5d7a1a89ac4543d770143c7ec42c09ce6302f10312950cfd4ee607fed6283a5bd1b2727fab4164fab11ed5cbf871a3deacf0ff06e60ba61c8","ssdeep":"96:1j9jwIjYjfDK/D9KUnRG4Fh8/G4FI5K424FdE+skKmtmni9I7RJlUaQxP:1j9jhjYjrK/BrRe+jgVMn9I7vl/eP","tlshash":"07d14371b1f512b610a382a23695fb1a79e0c613cbff4594b3dcc6732f9ee81a903194","first_seen":"2026-07-12T22:21:09.046012Z","last_seen":"2026-07-12T22:21:09.046012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.657Z","timestamp":1783894832657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/d9025b4f6a92ee7a.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 Jul 2026 18:13:18 GMT\r\netag: W/\"7c9-19f48158630\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3olNdDwR8WkUeuJw7dh2QAnuFnZSmQvHG1lpJtfWVOuFkMJ6APwaxsFCgeBoIDGc0%2FJDlVZMQY8Ib9eT0DEwlVA%2FHuBjPKpmkYI%2B1e2TT%2Fy6i4sXYzjUgQsWUflbGdA0Xg%3D%3D\"}]}\r\ncf-ray: a1a36f901f7a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1993,"size_decoded":1593,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1993), with no line terminators","md5":"64b5041967f43d5efb6cf116e7f647e9","sha1":"b27d50916873615feaed9c43b51e8cd91f74b40d","sha256":"4c280fd4c9a89d292f4b24c6df06d34ad4b9e31277ee0f8c6e4a0e5fa65b6f58","sha512":"316c8bc610b2080d289ff3a26775eff89c0c9ea2d7224264fef1ae5b5068e738815108b0f71503c197928d93625b93c9e9a4c4b9d5713fc777ecad9b08940b95","ssdeep":"","tlshash":"af4174e5f532633a23a84888b230e745bbb7882e800e0464f04fc41e14ed8d8929fb89","first_seen":"2026-05-02T23:37:49.250666Z","last_seen":"2026-07-12T22:21:09.047004Z","times_seen":26,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=1kzli","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.414Z","timestamp":1783894833414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=1kzli HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/landings\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-92fdf7803a7cf4ba-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=1kzli\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaqOdO7t%2F1I%2Bcb4jc%2BNLCBv4InrYN%2Brjyc1SKsQ6NDLL9yYQEg27Zcyzk2kAzDgM94%2FOC%2FXwWYQnqmp1TMdZ0GAEs4c%2FJpfVWBFW%2FGweBdcHlD3u%2FblDf%2FZUKTG9oNnGEg%3D%3D\"}]}\r\ncf-ray: a1a36f94d87a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3380,"size_decoded":2116,"mime_type":"text/x-component","magic":"JavaScript source, ASCII text, with very long lines (2244)","md5":"e17126594503f8065c1ab6f994feedfa","sha1":"d488b69812510a9db4398349874baab4be9867bf","sha256":"76a5a309247c51b8ffc07d3f6f5b493aa270eac3fc76ebf2619ef7de4085c58a","sha512":"8ab9a25d67aad296933356ca1dfe825aaa587fba595b0b6b74767a1dcd13bbecbb1705ca0655b846a3c3b93982f0dfe05e0bdcf13238d690b22a270fd27f896d","ssdeep":"","tlshash":"5861d137990eed7d5d26cc5c282f5b23858d453f8a345c99d3deedbc024913a1b852d1","first_seen":"2026-07-10T23:05:30.562709Z","last_seen":"2026-07-12T22:21:09.047509Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/8803d7c035faa1b9.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.303Z","timestamp":1783894832303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/8803d7c035faa1b9.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"1b1a9-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5Pbb9OJIeasGdGYfmftDuWK4BnksQ%2F55C6mIjgpvoK0XSRw5wJltUBqpXKAJCV1IFosxNlny%2FJjT%2Br7qaSL14YOpWm7JK5kRGi0jE8wI62JlY%2B0AqorOaxL3QwjDetT1Q%3D%3D\"}]}\r\ncf-ray: a1a36f8def2a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111017,"size_decoded":31444,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bcc9c08de93127c95d9dd3f187710d48","sha1":"d6eb7d9ea637a6f77524c8bbdfccc3b95b26b50d","sha256":"48e55ff9a3c7331583580224961224a2f95292ab523a5acd571684a175dfba0f","sha512":"fd6cfa5c281941558638af75e183079e167ffe7dcd78f644c8ec5e4852df6c29c3435122bd142d6af6383ffdc5032ad60dde6557da476759a790d6f7f23b7ce7","ssdeep":"1536:+N29IxBQi6ha/rqjXICyFZOzPEPia2ng8sx:+5P6M2j4yzBlgJ","tlshash":"efb3f7f935d5f48207ab44a6c03f0006f32c5d37149e68a0a3e5edda746499de1b3faa","first_seen":"2026-07-10T23:05:30.610153Z","last_seen":"2026-07-12T22:21:09.048322Z","times_seen":3,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/favicon.ico","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.558Z","timestamp":1783894832558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=6,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJekJo%2BYOeuyIbjOOJx37XG24%2BctsKHFYJCzOHeBjC9Lp964D9TK%2FCqvs9FCQM3vToHJkZzCnkt%2BToubrJlxp%2BUPfeP8M0LxW25XsAGFWmRE%2FrUhuLYvKpBgUsy1DRwS5Q%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncf-ray: a1a36f8f7f674e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":13439,"size_decoded":3612,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (13439), with no line terminators","md5":"209e24ebcaa210d0fd762909132b2956","sha1":"fee690c75c1365aed7ee7485caddee7bebe5bef9","sha256":"c6ae8f91288fd25004be193ddfc79d60582b49b05f105e5da64a11f36c939dac","sha512":"f4b9fce941848c706d06174202f8a4016c673a8f86c248895952dc1b4dfd169d6a34326e9a42f348db3b9520eea7b2adce31b749c237c1264492f4983bc3de99","ssdeep":"96:my7MymMPO4n7JfnnKzqvYoY9D3cx20WP5V0SX7wABc5o6kMyEYXSYWNYhs/sB5kg:f7BmUOyneiAMuSWa4aolS7nM","tlshash":"2a525e2e6406ee0de8672e5c003e9d3e51cec97bd736cd69d2dcca26168a47897c68c0","first_seen":"2026-07-10T23:05:30.595316Z","last_seen":"2026-07-12T22:21:09.049165Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.270Z","timestamp":1783894832270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"dbd0-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BdEWAdqJevBkywYVywAQ0qHyZYioPlowTqK2QuORLfoJB9yffwvdW9AZc1IfRrX7b7JcRPoVAiqP8XyrV7yowdze8AG2TEvGNmo73cQbyz4NEo8G2sLT3yXN9ybbJjVQw%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf0c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56272,"size_decoded":31772,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"337352e89c0a500c19e7c3a1cd83161c","sha1":"5987ba6a8b8c8cc7f755431eca614ea7f5de1b96","sha256":"7f5b8463e4c88e51ebc803105b9099def8163754f3a4453bb66f822878471499","sha512":"40d9cd93dffd18143dced57120735d2b31bb2added5cb801fdde509eb9f44db073aa69656befbb1eef6d957e3c4d77cb4c73e814ad72f64b46947c4a9e1d60ef","ssdeep":"768:PORWnLfP9U7ifzsufcbBUZPt7zrjrhPwUBUBv5pGUh08QtKFhj0akpAQ:POgzC7eQ+ckzHxw2MYq08QYrj0akpx","tlshash":"31436da6f721a30cd3676dbc985343b44b75be34be22475bd975273fee050a04c22a89","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-07-13T05:00:38.978164Z","times_seen":493,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/91d88a3239e0df97.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.308Z","timestamp":1783894832308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/91d88a3239e0df97.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"7686-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIUf%2BnlDOaYbZQBsvJi29H553YmkP%2BNmGCo%2BASNiDh1wtJ9sddLckz5xfXsiYgftYrgUxSrrkfrUQPIqPM0sKgsHImqMPa%2F69xaDYkAR7mGbPqyLFFROAAkynd6Q5IdZRQ%3D%3D\"}]}\r\ncf-ray: a1a36f8def2e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30342,"size_decoded":8143,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30340), with no line terminators","md5":"445432a850e56e4b23c624035e17b0a1","sha1":"b45a13c7c94ce27ab7705badedaea651c746f1ba","sha256":"dd1d5df49e49d9aea3d0461d78bad548e7698ecb55c270f0cd6f837a3a479f51","sha512":"ad3b15ac18e9653a1865a048421c8825992dbaae85843256a8c9197be1a3a18cd57b2d8a608ecee9fc0fe227c12e56a0dcb4ce53343d2d620047588ddef70e5e","ssdeep":"384:ra5SF5BqXE0m1WmRQQ0cJ3XRP79Fg/ely8qWtOPSNYdgoZ:m5SHBd0QMMxaXZ","tlshash":"21d2c8717395fdb252db85d9d03a0015f2290d3530ae28b0b394dcef368dd8991bafa9","first_seen":"2026-07-10T23:05:30.557773Z","last_seen":"2026-07-12T22:21:09.054914Z","times_seen":3,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/op1.js?v=1.5.0","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.328Z","timestamp":1783894832328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /op1.js?v=1.5.0 HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 13 Jan 2026 17:06:46 GMT\r\netag: W/\"1712-19bb8530070\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REqCqZL0UIQQkI3m5glCRWa2mv%2BppNVoJIkgwMpfxgIEyvPeEAWwaz6ecNLw%2FKv0ev7MNdFn4smu9jRXQ8A6Ims%2FD5bWthrQiS8adK2X6TXDZ7vQ1tvm%2BbcEIkQyiIXgIw%3D%3D\"}]}\r\ncf-ray: a1a36f8e0f3f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":3041,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-07-12T22:21:09.056069Z","times_seen":251,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.273Z","timestamp":1783894832273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"dc20-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bnrw2RGbokfRjFqG3F%2Fcd8dcotk5t5MbDEGFSX4EQV54f53I%2FGcudOn5mmvca54QhxoIV5uqAUqOzZbThFekPdXWDZ%2Bk7NcEnGZZwhTaBCE8lEgwPE4JXqAGDpkexGTACw%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf0f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56352,"size_decoded":31698,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"0305ad7453af42d8f036dd29294ae5c3","sha1":"ac9a042a40e49e8cdbfe0e64e84d9b1c5724e98d","sha256":"7a73e6aa8107e0046eae5dd713bf4752d93e689f57d51c45b1545acddfd71be3","sha512":"d5a1bc2041edc0debccd45637460ac89ac3234859029b8507072d6232bf0f0e9229864ce51ea3b43eacfdbb029228242bfdca046ef86db05a1ab278ddeca209b","ssdeep":"768:VJRyPX2U7ifzsuaBqydjkUP057fhrrXtk1ay8zENP4EgzwtCE:DRyf57eQFdjkS0HC1aSAbwtR","tlshash":"60434b16f716871ee2936eb9c673d3a4e7b5bd30be23434b64755b2ade0b0e44c21284","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-07-13T05:00:38.978667Z","times_seen":843,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.280Z","timestamp":1783894832280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"63610-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMAVzLkgkLDn1pM7FRRsqqzmwxZkxSf1AOKR6d5YMMToPRYDrq9cJpL8r75fgHArSVkn1NFjh1SnpwvtCukqmxFqkCLoKYUYmcAe1NT2UdR8Gu5CFDrr4tPStqXsp%2BsmmA%3D%3D\"}]}\r\ncf-ray: a1a36f8dcf154e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":197485,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-07-12T23:10:24.592788Z","times_seen":464,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/chunks/23d3d4052dec4e0d.js","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.306Z","timestamp":1783894832306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/chunks/23d3d4052dec4e0d.js HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jul 2026 19:19:34 GMT\r\netag: W/\"86d-19f432bd570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoeUSFdxP%2BdrkXeT0ut7ldn1Pdppyy%2BmHJHd%2B9bDo%2BUmkPwMrKBqD9TXWQMCVKbrCIs0N%2BV1U0PH7poRNxwsneECB9ZPJnmZfgZTB%2FhKnlicIIih04ZahVrOjiB%2BtyIdVA%3D%3D\"}]}\r\ncf-ray: a1a36f8def2c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2157,"size_decoded":1868,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2157), with no line terminators","md5":"c7b5b06921f0355b56e92398bab686bd","sha1":"d4b4317770c4497e6ea52ad84f4859fa28ddce00","sha256":"1e05f07e957f721ff1c27d78f5be56fefec3a9e45310da936acdb1b89905b91d","sha512":"4f354facee8729a81de4769becf3b819f633da458e2bbe30ba817d06a15fb4d08621b3c2de16b881b92638288caaec491005154115369d26bcfe9bc33a3f9a20","ssdeep":"","tlshash":"ee41b7453045e5a9291318a8a0bf040db66f5fb4810c9d3295ee74f5212289cd7936eb","first_seen":"2026-07-10T23:05:30.604361Z","last_seen":"2026-07-12T22:21:09.057536Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/landings/first/keys.webp","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.840Z","timestamp":1783894832840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /landings/first/keys.webp HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whalewins.site/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:57:48 GMT\r\netag: W/\"515a-19b7b5a34e0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhp7yxFWOZkf5LpqEig3PEsDtxp22T5EbY%2FkL%2FIZYehX9MrK03qBiY3SLeowWp4P7xcHWL%2BX%2FuepeyIcO2oP76mN0G0ea7RN4lPJFcGc%2BFwOFkU7A16eOWkUaP4QQ2Qsgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a36f914f984e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20826\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20826,"size_decoded":21548,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6289c2009781a520cd4b80e89ace042","sha1":"70ce67b693c0d43c1b4f8dacf1ee40d2eb82bfa3","sha256":"266e9c7e8935742003ceda68f7575af76016e19b444289c273f44ad3320804ac","sha512":"c18c250427f15ead943909e5f289faa7b24c4e23a80248c830641a1669a3c14f63c4d0850eafd15bf230dba38fdf942078815db10557423163d339b4cedf8507","ssdeep":"384:/SgA4eR8qKOt1NMJc4YcjULxNLX9KDk8WZMU3lpYtqBp4GOAtudktUbZ0:/Sg3eR7KAa/2MWctq9tG0","tlshash":"fe92d0074677a2dbf4f07df88a296bd1b229941f1608fb69077b64e490438b0727b829","first_seen":"2026-01-31T21:10:03.117614Z","last_seen":"2026-07-12T22:21:09.059801Z","times_seen":143,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth?_rsc=1nnaq","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.420Z","timestamp":1783894833420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth?_rsc=1nnaq HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/landings/first/__PAGE__\r\nnext-url: /whalewins.site%26blue%26en/landings/first\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-8823deacab374a5e-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nx-nextjs-rewritten-path: /whalewins.site\u0026blue\u0026en/landings/first\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first?_rsc=1nnaq\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oc1xRkPGdcQiAGWlt1%2BoDjy1U4NuRm7gj2k1%2B1gYu01ylKlLLzbZcSQ3glhoWfKeDk8N3%2BDgtq%2F9DLeTtmkZqSGBytPgARzZLH7Ppiaxm%2FwnWVb4ox%2Ff9hqOFUs88%2FTGOw%3D%3D\"}]}\r\ncf-ray: a1a36f94e87d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2147,"size_decoded":1671,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1342)","md5":"742ec6f5d609e319fb43e85e70fedca8","sha1":"07ca71f1a1a018e4b5dfeb6cf5c6a70fe1ef038d","sha256":"1ea2ceddd01e656f310354e7edc127713c2ee0d8cb64c0770acf22234b1ce45d","sha512":"91d614b4ae1b2322074feea037de7ac38bab47bf2ac798b8a27d6ec4261e9fd5ce5da0aa554264174b4cfc3b3e7d2ec5362417459e60eb95f48c706760577f19","ssdeep":"","tlshash":"0541d51bdc2eee594861dc6c6c2b7f2251898d37c930cc9ddaceecbd05546a62f94281","first_seen":"2026-07-10T23:10:33.624466Z","last_seen":"2026-07-12T22:21:09.060337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/DMSans_Medium-s.p.4f631073.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.272Z","timestamp":1783894832272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/DMSans_Medium-s.p.4f631073.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"dc3c-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsQmViBY8e%2F7rZcY1JxpwTCrUKrN83fJn7drB1Po9i%2FuDDp9ls5GIRr5W6yblM4KPTYfr1LmK43Lt%2BmwFWKWgcamTQG%2Fx9KmMOWM8qVpKYlDF%2FGrj%2FcrpUnrfGeUvSf6HQ%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf0d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56380,"size_decoded":32024,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"6244219cea1110e6ec49e950f070acf8","sha1":"00ea5b83c109e751b844413d32e21b7689bf786d","sha256":"32c8fe1874433bd34674ef1b58037fdb7d1b245d5844076c76c6f3a2c69d6840","sha512":"151abea1c586541b2ee6fdbffea8dc7046027b37599092acba6a6a89873501ac3cd2f459a58df5be30b677bc252b4031fc4c9b4e9b5649a30786682c28243bbe","ssdeep":"768:ejiwYeGvU7ifzsu/ma5tBMPxmMu4mjtpg9IfypSe59QQZayKRgJDE/T+:ejD7eQ8dGZm14/m059QQo1RgJDEy","tlshash":"bf435d42f7158a0dd2836ebc846383f4b777fc34fea2839b5179ab2aed490a14c11384","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-07-12T22:21:09.063099Z","times_seen":451,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Inter_Bold-s.p.fbbe7604.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.276Z","timestamp":1783894832276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Inter_Bold-s.p.fbbe7604.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"65560-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRmNndOD1ZOLiIt%2FfaeRc8GiW4RDxEv251FqRjpywGh4Uhsboo0Vas86UhepkqqY3d%2Fe6sJxEaGfh8uu1mifN2OYk3TfyOROQ%2FuIDqRAwTvBtjvj27RAyI4nqL28GGdbnw%3D%3D\"}]}\r\ncf-ray: a1a36f8dbf114e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415072,"size_decoded":202852,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterBold4.000;git-a52131595;RSMS;Inter-BoldInter BoldVe","md5":"8f2869a84ad71f156a17bb66611ebe22","sha1":"0325b9b3992fa2fdc9c715730a33135696c68a39","sha256":"0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1","sha512":"3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834","ssdeep":"12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8","tlshash":"ff946a1bf701e70eca562c388af59bd033b9bc91791ee24b705a3a09dd971b40ad71e4","first_seen":"2024-07-29T21:54:31Z","last_seen":"2026-07-12T22:21:09.064253Z","times_seen":309,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Roboto_Bold-s.p.1734e663.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.284Z","timestamp":1783894832284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Roboto_Bold-s.p.1734e663.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"28da8-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zY8KB55iSS2h6fbiKgENEhj6IbN2cQbtcbmH5nQ5RbU9JcMv6cD9lqUoBdQFLTvbnccQzhbz%2BrLMXDjKCvS6zMbaGK2Nc1Q64VK2KFL5glZhA9UJgULGx44JP8Vb2TzQqg%3D%3D\"}]}\r\ncf-ray: a1a36f8dcf194e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":91586,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-07-13T18:38:29.301521Z","times_seen":6211,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:32.289Z","timestamp":1783894832289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 10 Jul 2026 20:29:46 GMT\r\netag: W/\"29144-19f4db8d290\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NOXM%2B5wzjYER2bKlbyGOajccrSzvFe6vDa7m9WRub1fbidgVU765L3jbLq3mOfQldQoDCDwoBMeB9fRUbllpe6BtDllmIiq5fL0peFwHrbrtU2FM68JDgyLZMMRHLR%2BXxg%3D%3D\"}]}\r\ncf-ray: a1a36f8dcf1e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":91039,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-07-13T22:45:35.566825Z","times_seen":9495,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/auth","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:20:31.819Z","timestamp":1783894831819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 22:20:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-middleware-rewrite: /whalewins.site\u0026blue\u0026en/landings/first\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=120, stale-while-revalidate=31535880\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7CFliHqXldCRnyiXSh6cJe7s%2FlaVogYCzl3E4YjeESVDTEqFOUOv1z51wkttWBNBrG7gtjvLvS7knHebFJBqWmRrWKYQXrwDRBoKtuiAGx2Ctf3QU6q2OEZ%2F35uj2f3ew%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a36f8b4e990afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":27620,"size_decoded":5925,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27620), with no line terminators","md5":"7796406a02490bc880b2a4187fb69f87","sha1":"5bc3d908bc34a19c02b1389a42302f9385c4892d","sha256":"b2f0be10009e0dd2d3d007fa71c96508a0bf3629bcc66551282ae1feda682eb3","sha512":"6801ae29ce04c8bc4c7feda87db3f1ac649b8b2e08dc9af1bd7625f452658d45d57a985225b1c74fb3a79a5c2c1a06e954197d0940668d1036f83d37faed7e3a","ssdeep":"768:CpxzMR2xmTJzpWKl+k2OrfPPupScBV+Ty7:rF6Qa","tlshash":"26c23e2eb80ade59ac676d2d107e9d3940cdcd7bc734cd68d28dce6a06821791be6dc0","first_seen":"2026-07-10T23:10:33.607573Z","last_seen":"2026-07-12T22:21:09.065737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":44,"connect":1,"send":0,"wait":136,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whalewins.site/ingest/v1/web/start","fqdn":"whalewins.site","domain":"whalewins.site","tld":"site"},"ip":{"addr":"172.67.155.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whalewins.site/auth","date":"2026-07-12T22:20:33.407Z","timestamp":1783894833407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whalewins.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 04:51:04 GMT","end":"Mon, 28 Sep 2026 05:50:46 GMT"},"fingerprint":{"sha1":"20:4D:43:9C:E6:98:60:FE:91:52:5D:A8:E9:B5:78:08:5D:E5:F5:AA","sha256":"89:4A:54:B5:7A:83:3B:74:A0:B0:4E:18:35:A1:EE:49:36:FB:A5:62:81:DD:A1:BC:4B:61:D7:E2:11:4D:F1:EB"}}},"request":{"raw":"POST /ingest/v1/web/start HTTP/1.1\r\nHost: whalewins.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://whalewins.site/auth\r\nContent-Type: application/json\r\nsentry-trace: f0d87e9655fe4ed2ba791dc67c720976-a1da062ba1c527ab-0\r\nbaggage: sentry-environment=production,sentry-release=web%403.3.0,sentry-public_key=undefined,sentry-trace_id=f0d87e9655fe4ed2ba791dc67c720976,sentry-sampled=false,sentry-sample_rand=0.73300823831185,sentry-sample_rate=0.1\r\nContent-Length: 315\r\nOrigin: https://whalewins.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":315,"data":"{\"userUUID\":null,\"projectKey\":\"hXZI8YC5XRbnxJF59UBk\",\"revID\":\"\",\"trackerVersion\":\"17.2.9\",\"isSnippet\":false,\"timestamp\":1783894833404,\"doNotRecord\":false,\"bufferDiff\":1783894833404,\"userID\":null,\"deviceMemory\":0,\"jsHeapSizeLimit\":0,\"timezone\":\"UTC+00:00\",\"assistOnly\":false,\"width\":1280,\"height\":1024,\"referrer\":\"\"}"}},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:20:33 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPjfO72FimAeVaz%2BJmEYGN9M7dAhpdwQbvlk6a%2BQOMxxnXP3xvza%2FFoU%2BQiiaFkeafVAXbt%2B8tEzAOo4gHedv7TQmvrGsnoNgVWwvoMvAadQTj8IPWRf3qj2WbpqSt9LKg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36f94c8774e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":757,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"f88c0a335d0b341a3e1bc8164169f934","sha1":"79d9896e93155efa00df8c29da9684599543beed","sha256":"cf9be91f18e11cf4bf9caf1181753266a2b7f159327bb3d0081bcc02260d27c2","sha512":"be6f5e3516647f43eed46198171a50660015e484e5533201585425152b3b7d33399a71cd32bdc2510d7cbe0552dd390e8eef972ac5e6aa3f0376de2357d8dc03","ssdeep":"","tlshash":"d8c02b6d35137c8cc963327422c37080c0c6833764ba41138400800372cf299cac3397","first_seen":"2025-04-20T12:46:42.411483Z","last_seen":"2026-07-13T13:47:03.310976Z","times_seen":1582,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"whalewins.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}