{"report_id":"9c79e6b0-844c-43c1-a8a9-3ac209e169ad","version":0,"status":"done","tags":[],"date":"2026-08-12T16:56:02Z","url":{"schema":"http","addr":"winstep.cc/","fqdn":"winstep.cc","domain":"winstep.cc","tld":"cc"},"ip":{"addr":"154.221.25.42","port":0,"asn":142403,"as":"YISU CLOUD LTD","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"winstep.cc/","fqdn":"winstep.cc","domain":"winstep.cc","tld":"cc"},"title":"winstep nexus官网下载_Windows桌面Dock美化_winstep nexus mods中文安装包下载","dom":{"size":30755,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (809)","md5":"3d423eefd92fc152e1489e485a504d6c","sha1":"c28893d72d86d0ed35207f85b13f1aa6a5c4cd86","sha256":"6234a9923af6263136816423d65235d9b702b523b04ff9082735761d9a15a785","sha512":"3b4d4d8aaa709e66609f511ffa5fcc6f93f6602890c9dd8ad5c7f8ea20419177078e2a8e19c5877fd4dd7d9f96238040f9a2377201747c3c4cd287fd32ee9be4","ssdeep":"384:Qs3lGf4KIMVNsbIF9/9qJu6gt2wlQ9ixKk9bzMwTm/U:Qs38f4KIMVNZ/9Gw+WgwTaU","tlshash":"39d2fb76b1b0643f7223d5e376a8635f2514e447c92b4a04f1ad0a689fcbed34aa330d","dom_hash":"domhash5e70c90a87dd14af8eb3b55768869ae3","first_seen":"2026-08-12T16:40:56.596796Z","last_seen":"2026-08-12T16:56:02.545962Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winstep.cc/","fqdn":"winstep.cc","domain":"winstep.cc","tld":"cc"},"ip":{"addr":"154.221.25.42","port":0,"asn":142403,"as":"YISU CLOUD LTD","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T16:56:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"winstep.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":3,"received_data":5929,"sent_data":1720,"comment":"","tags":null,"fingerprints":null},{"fqdn":"winstep.cc","ip":{"addr":"154.221.25.42","port":443,"asn":142403,"as":"YISU CLOUD LTD","country":"United States","country_code":"US"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-08-12T16:40:35.169355Z","last_seen":"2026-08-12T16:40:35.169355Z","alert_count":2,"request_count":2,"received_data":32154,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winstep.cc/","fqdn":"winstep.cc","domain":"winstep.cc","tld":"cc"},"ip":{"addr":"154.221.25.42","port":443,"asn":142403,"as":"YISU CLOUD LTD","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f25606f5bdea36745ae10ecb398fc9e7","sha1":"dd99679b0e3166e397d307619ecbbe1eeb9cb1b1","sha256":"f312620fc65b3b29a5eb899b16e58e7d46f459871cf8796f92424f3509df635b","sha512":"f96fd84c7929c71e3cb94aeae68408e918cca7e088cb44cd43ef44703cf1964f0c253c50c169e3fa0771409d79ddc61c2a9be7128e4f899701fc03a4ff3b66e6","ssdeep":"","tlshash":"95f07dbdfc60263208b705ff62afb6e8ba3211447449e620861ddc442f65e851e71be9","size":631,"data":"","first_seen":"2026-08-12T16:40:56.604257Z","last_seen":"2026-08-12T16:56:02.55036Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v16/V8mQoQDjQSkFtoMM3T6r8E7mF71Q-gOoraIAEj7oUXsiPMBTYDVD.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winstep.cc/","date":"2026-08-12T16:55:33.205Z","timestamp":1786553733205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/spacegrotesk/v16/V8mQoQDjQSkFtoMM3T6r8E7mF71Q-gOoraIAEj7oUXsiPMBTYDVD.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winstep.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 12 Aug 2026 16:55:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1638\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1638,"size_decoded":1977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"7585e7a10089c6c98d6926c5fce6b13d","sha1":"ae4f1e443409100a45b4679b6b274495f75c35ae","sha256":"80b8bedf43c8272f3cb440ff02c1fd082140bfc75956b0d759fdc82bc2426b89","sha512":"1bc5cfc712edda2769ff01c8688e11abffae79d713c54caa066070ea01f10b5c0957c426a5b565de1d86f318a52ebcd99a5b460451cb7b207cdeaa03c3993efd","ssdeep":"","tlshash":"8031a67bbccd30dfa82bc0a1d48391146056cd81f359cbdeab4de679e4a9a4920339c8","first_seen":"2026-08-12T16:40:56.603257Z","last_seen":"2026-08-12T16:56:02.546819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v20/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKxjPODiJBo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winstep.cc/","date":"2026-08-12T16:55:33.207Z","timestamp":1786553733207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jetbrainsmono/v20/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKxjPODiJBo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winstep.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 12 Aug 2026 16:55:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1638\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1638,"size_decoded":1977,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"f422f92cc391ddfde47ac6a6e6012cb0","sha1":"049e7ff8c8d9f1df6e487b65595fb4f12aab5bdc","sha256":"4559aca7cace88239b9b8e4e603a18acc7924bb5c297d11eff215bff46dce67e","sha512":"588fab5be3a4ac03cc0f59341b53b6e72687b55c56fe9748cfa7a2bc65d2d4c8097320ffd48ee758cbb67e0f0809b4350f67d0281e2c5174faeba6f6fa038e22","ssdeep":"","tlshash":"5e31a67fbdce319fac2bc0a5d483911460568d82f355cbdea74ed739e4a9a4910339c8","first_seen":"2026-08-12T16:40:56.598306Z","last_seen":"2026-08-12T16:56:02.547656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.cc/icon.svg","fqdn":"winstep.cc","domain":"winstep.cc","tld":"cc"},"ip":{"addr":"154.221.25.42","port":443,"asn":142403,"as":"YISU CLOUD LTD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.cc/","date":"2026-08-12T16:55:33.400Z","timestamp":1786553733400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.cc","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 16 Jun 2026 03:00:00 GMT","end":"Mon, 14 Sep 2026 02:59:59 GMT"},"fingerprint":{"sha1":"3F:88:F6:CA:A0:FB:39:79:69:08:4A:19:CF:89:E1:97:FD:BA:05:92","sha256":"DD:B9:7A:7C:2C:C2:52:72:06:EF:C8:7E:33:58:CF:1D:7C:F1:97:43:68:55:72:C6:CA:54:06:61:DB:A8:E5:24"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: winstep.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 12 Aug 2026 16:55:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 259\r\nlast-modified: Tue, 16 Jun 2026 05:38:48 GMT\r\netag: \"6a30e168-103\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259,"size_decoded":699,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"315fc79fc9e1db45ad88a1745e594bb1","sha1":"c2d60a4d673108e4b82bd1bb5623ba47e59d1044","sha256":"21bf775558f6e77d5e48f870ec6fe6960aaf980670b4af355e2ee13e83747696","sha512":"106788cce686bc1ea1413972e13a47fb99a8bf505b07377784c8e7bb82ad56bad623b4a0ef7b98e6df9e690825a382e7ba5d08753bfcf8bdfb6283ba1beee39b","ssdeep":"","tlshash":"26d09551d5cd8714cb1c8d056b057425706f79cd79cc4918f5d00434dcc58d7abd535d","first_seen":"2026-08-12T16:40:56.59941Z","last_seen":"2026-08-12T16:56:02.5485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"winstep.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winstep.cc/","fqdn":"winstep.cc","domain":"winstep.cc","tld":"cc"},"ip":{"addr":"154.221.25.42","port":443,"asn":142403,"as":"YISU CLOUD LTD","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T16:55:30.766Z","timestamp":1786553730766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.cc","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 16 Jun 2026 03:00:00 GMT","end":"Mon, 14 Sep 2026 02:59:59 GMT"},"fingerprint":{"sha1":"3F:88:F6:CA:A0:FB:39:79:69:08:4A:19:CF:89:E1:97:FD:BA:05:92","sha256":"DD:B9:7A:7C:2C:C2:52:72:06:EF:C8:7E:33:58:CF:1D:7C:F1:97:43:68:55:72:C6:CA:54:06:61:DB:A8:E5:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winstep.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 12 Aug 2026 16:55:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 15 Jul 2026 13:49:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a578fd4-7924\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31012,"size_decoded":9255,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (803)","md5":"c5d9380b7e1bfe526df0522916c5762d","sha1":"3e0775378bd1447db7181f377f01b33547839885","sha256":"c68dcb0ca0b5fc07f3b2e0042815bcdac5dd68de22ee5f4ae14df40ce98a0db3","sha512":"6af37aaedbd3efac502486c8a5287b61d3f4e4a4ade3593ffae294dc0968c71040dde242cd31df9641cb50a75433fb6e4b78800a4cbce6d74040cdd32fca58ad","ssdeep":"384:Ew3lGf4KIMVNsbIF9/9qJu+2o2wl74ixP/9MHMwTm/i:Ew38f4KIMVNZ/9rwBuswTai","tlshash":"d1d20b76b1b0a43f7223d5a376a8631f3514e443d92b4a04f5ad4a689fcbed346a330d","first_seen":"2026-08-12T16:40:56.600516Z","last_seen":"2026-08-12T16:56:02.549127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1987,"timings":{"blocked":0,"dns":1008,"connect":244,"send":0,"wait":243,"receive":0,"ssl":492},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"winstep.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/publicsans/v18/ijwGs572Xtc6ZYQws9YVwllKVG8qX1oyOymuFpmJxAcoiiVmVHof.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winstep.cc/","date":"2026-08-12T16:55:33.202Z","timestamp":1786553733202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/publicsans/v18/ijwGs572Xtc6ZYQws9YVwllKVG8qX1oyOymuFpmJxAcoiiVmVHof.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://winstep.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 12 Aug 2026 16:55:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1636\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1636,"size_decoded":1975,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"017140010adcae2f6ff379c3b4bf0168","sha1":"9c6559e28d720a6a870818e4ef0654ea0c5b246b","sha256":"0c8e23c164a30e60b75ab6ac7ad304443198e8470ed28df01ffcd51ed3520cd6","sha512":"270804300cd2e4d7d70b1ce1b08fc3f5cfea5bfc5bf7cee9c13c8961cf799ecd8a7319d7dc7040dc843129d4f8bcbaa4b806bd74ec126cf5929eac7ebcea6eb6","ssdeep":"","tlshash":"3431a6bfbdcd309fa82fc0e19483911450568dc1f759cbda6749da39e4a9a4910339d8","first_seen":"2026-08-12T16:40:56.602265Z","last_seen":"2026-08-12T16:56:02.549678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}