{"report_id":"a7356c5f-9088-4f50-af55-356b20fde47d","version":0,"status":"done","tags":[],"date":"2026-09-03T11:36:09Z","url":{"schema":"http","addr":"wewin55.best/","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wewin55.best/","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"title":"wewin55 မြန်မာ: စလော့ ကာစီနိုနှင့် လိုက်ဖ် အားကစား နှင့် အဖွဲ့ဝင်ဆုလာဘ်","dom":{"size":124333,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13222)","md5":"d887bb657252fb4cae7afe06c157cbe8","sha1":"e7b78aa415e2fbdbde25739b98e4bb0261349c08","sha256":"af638a1b4e0966b2e1863780ccf3d0f3ebd54e507e1df573c7bc724d01c3f8d2","sha512":"c0a39c21ec0cf4cb6474501072b71b48d8354aefc5bbe0228c30b49e112bc682cdfdac2e438b45db1fd15eb01baa7e3e5c8cdc0d639376d45bc69e6f916c14dc","ssdeep":"1536:nsfFqK69A0eRMYtTqo2ZTv8Kphr6r1qPs+7ft2pxn4YxCfBa8Dip:cFqKl0eRMYtTCZT1MZqU+hiGYxyBI","tlshash":"b4c35360a4f9512e60a3c1961a9e6b7e7cfe8102cb014c9577be0bf90f4adc3d652729","dom_hash":"domhashe4e418bfbf545b0baf602bc8fb92fd6c","first_seen":"2026-09-03T11:36:15.540326Z","last_seen":"2026-09-03T11:36:49.915413Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wewin55.best/","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T11:36:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":2990,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wewin55.best","ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-25","domain_rank":0,"first_seen":"2026-09-03T11:36:10.277226Z","last_seen":"2026-09-03T11:36:10.277226Z","alert_count":11,"request_count":11,"received_data":831990,"sent_data":5583,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":4,"received_data":545261,"sent_data":2170,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":4,"received_data":101595,"sent_data":2206,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wewin55.best/","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa3d7c4722947a743f3400f204d70990","sha1":"90e915b4cb4a66d3b8f64ef3ec4d5aab9959f4b0","sha256":"979730164aa6dcb4ade9d40b7dbc92816df58e7fde5d873b890fce0b4f778490","sha512":"3e3644181210b8c45a7b3c3605ae437e67cb1b92f60e89fe7b02b16cc9f56fbf53c52f9c01e23ae0e6b75ad0f17dfa340209bb65d58ebe1ea513e5487c4f8fe4","ssdeep":"384:6hYz1aCLYqTIHSxIeInkq7ldqIf7q2iYjIkI03jbdMXiUXZ4gxWctVaJiW0eG9ig:6hYz1aCLYqTIHSCeInkq7ldqIf7q2iYc","tlshash":"ed723397fbc22229602390a547e7bbbd3c7e804297024c79b71e73f80f855df56a2a45","size":17353,"data":"","first_seen":"2026-09-03T11:36:15.565249Z","last_seen":"2026-09-03T11:36:49.931378Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-03T14:25:52.848473Z","times_seen":31602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-03T14:18:42.861784Z","times_seen":429637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wewin55.best/img/wewin55-home-casino-brand-17.jpg","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.194Z","timestamp":1788435340194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /img/wewin55-home-casino-brand-17.jpg HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Jun 2026 21:35:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a34649a-1a038\"\r\nexpires: Sat, 03 Oct 2026 11:35:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOGYTsq1niEkERSqvE%2FVAIk%2FIKAJ394ZqYLduvfvcuzGvFyQSyp%2FUvuqG%2FPWWcKkNhTgvwYOlLpAeQuZ%2FKQBLPOp3dkdWvWczGpzTNWSrqygYVuctZxJF35xfRIgX5Q%3D\"}]}\r\ncf-ray: a35473cc3d14c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106552,"size_decoded":106992,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"629df25060e321621eab0d0ea2bfebae","sha1":"628c049a5f57fb5e684e3973f02f92584f271537","sha256":"5e5fddf0dd251ad71874d1e54b1ffe22d2cd7cdf85430297ddaea8b3e00a3414","sha512":"5106088b85fa3eb6b17764089a284bd0005ac18ed6985dc30f66b491b1a90fe84205d0ee24ccdcbfc01a81e7fe1845ef7380e35c3ab8e19f9dac69c4a5ac22c9","ssdeep":"1536:OTl5WTJ+J1OWb+M9CxLIL9rxcHkuNLdiAdgcS+p3n12mVoLOQ+dLvj1CYpOeokCz:2ldJjp9CxSduOAG+3n1ZLFp1vOeoYhe","tlshash":"3da31254662cd4e0d96076f9dd1ad9cba6218f3d910f08cbc8db126d66cc68e1c8d8fe","first_seen":"2026-09-03T11:36:15.543224Z","last_seen":"2026-09-03T11:36:49.928274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/img/wewin55-home-casino-brand-18.jpg","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.196Z","timestamp":1788435340196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /img/wewin55-home-casino-brand-18.jpg HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Jun 2026 21:36:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3464ce-1a261\"\r\nexpires: Sat, 03 Oct 2026 11:35:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoBaHgwC09ZrsnuK2JASimG0hWUNmvZLxLuIaG5bG0HZowxxab9%2Brb0CDK82Uhblew7FVi0tF%2Bq%2FbHbofVt8vqFqBEF2nHiyeiqsoPnlMIEvDftM0JOzqVajSRXScPI%3D\"}]}\r\ncf-ray: a35473cc3d18c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107105,"size_decoded":107789,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"cb44e8e88e964bb0bdb924d16cc5c22a","sha1":"6ef4299538e7381801bc0293f16d1329a8bfc44b","sha256":"6ce9ed8b0b903926422a9a44b73d7dd7834efb27fa771e3b09b64ac0dbcb57ca","sha512":"c8218c658136d6ba55b0365666abf757500b6f9c104fc284f05cac45f131d0525807543b4a3cdd8cf03c39f5ef6d3b700a85b905e5159e86fbceb1e9df436831","ssdeep":"3072:SbHkPOUrDsqw9xj4Vsi7ydcjL/8W5cGR5q+HGwk:/POUrDG54Bmd295cGu3v","tlshash":"b4a312d5d36336de03a6138c0be31bfd9f94c50e8b89ee02e4a177d5b8844861b657c9","first_seen":"2026-09-03T11:36:15.544762Z","last_seen":"2026-09-03T11:36:49.918898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/assets/favicon.ico","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:41.055Z","timestamp":1788435341055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:41 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a3eacb6-14f4\"\r\nlast-modified: Fri, 26 Jun 2026 16:45:42 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TedTbMahizOADtoJhvqj95hbhDbR7D2V3CrQ2nkK7QKNwrmsm%2B0F9vxuEo3La1HAAVXiZSIchpgnk%2FigodhwvQeIfjAkw%2FwqhPpRSlLIw3zOrr05uzboQEVrT%2BGIpzI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a35473d19dedc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5364,"size_decoded":6047,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"78b47fd5b12c0b4f6aff297701e85e78","sha1":"1cc1f6774a780be2e66fe481a6ed7b3c9ae969f2","sha256":"ee402e04c33e51dc741b7f7c00e8654d224999e9bf6d97f13839996bc9a2a64c","sha512":"f57e0c0465883cbbda63ec9e9d7bcbb0f8b6d4563556ee73aa96644ba6ff555311370e8d3004ea8a1031057a47a8cf142b630d7237738cccd0534f00690bde66","ssdeep":"96:JbZX3+Fy0lMPeNHe90gvCEgAEhwtXqpr+t9tDAia4XttCfp:lZMy0l789xvtgNhwt6QtH64Xa","tlshash":"3fb17d97235246640f1d4bf4471e871aec8b2238034a6b7852a985f00a1688337af6ad","first_seen":"2026-09-03T11:36:15.546431Z","last_seen":"2026-09-03T11:36:49.929936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T11:35:38.397Z","timestamp":1788435338397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:38 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 03 Sep 2026 06:50:26 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1oozbohG6ztISWmJhRjANVjUMVKcLzIZQS56ny8h2Cx9CzMas4xvgWqP6tYhSlqFe8OwtjLPnCVXHDiANDAREJNrJPbnuczXwdum4smhD0HxhH%2FiosD7SThXwv5UlzY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a35473c1cb37c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":111244,"size_decoded":19444,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2606)","md5":"a6026241e392137f89f8e5377e9e6178","sha1":"5d5f141390d2e16193aaa3c71ba77593d52da0b7","sha256":"283f8cf60d564adaabfdfc594be6a1bdd7247c03e82f92e1cd685e7e77695b80","sha512":"4298bb7063bd7d610be24c1f705e7c3fc61a91703aa1b572194cd61758582f2e8ac0b8d1f610dc5af6c4a6d2f090ff342f0a47c5680b4fc1c7e07c889f357b0b","ssdeep":"1536:yVK69A0eRMYtTqo2ZTv8Kphr6r1qPs+7fI2pxn4YxUfBa8DiT:6Kl0eRMYtTCZT1MZqU+kiGYxcBU","tlshash":"85b3326060f9512e60e7c1961a9d2b7e7cefc103da014c8577be0be90f4bd82da52b6d","first_seen":"2026-09-03T11:36:15.54786Z","last_seen":"2026-09-03T11:36:15.54786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":100,"connect":19,"send":0,"wait":385,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.602Z","timestamp":1788435339602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\nage: 2575071\r\nx-served-by: cache-fra-eddf8230066-FRA, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25259,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-03T14:25:52.848473Z","times_seen":31602,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":9,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/padauk/v17/RrQRboJg-id7OnbxckXh7Lk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.182Z","timestamp":1788435340182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/padauk/v17/RrQRboJg-id7OnbxckXh7Lk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wewin55.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38080\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\nexpires: Fri, 03 Sep 2027 11:35:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:31 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38080,"size_decoded":38880,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38080, version 1.0","md5":"98af1dde2669749eb4ec42823db8817f","sha1":"49c3e146ab36464f20c8d4054acad9fd87561531","sha256":"fad9c7944d8a0de053e8f8683e0d710b97e428bea7c9bf9397f2b167e1f2acf9","sha512":"84d0faf4f817e110b6a83688649739cf02662adca13fe01cd5e30304a48f763e9d6661e8b8a0c5c84d4162de3b6b763e0ffa041f130afdc1b37cbe3d67bb0edd","ssdeep":"768:hcdzwgTn0IKV/ckq9rwJBcaEiCTAMgxgrTbShOB0mQdy:hqzwgT0LFcaEipb6rTbShO2pY","tlshash":"0d03f186c27039c6c3dad8b7f0339f575c68ef56289a9478f6d98662343c742523b884","first_seen":"2025-12-16T18:58:22.603573Z","last_seen":"2026-09-03T11:36:49.93067Z","times_seen":14,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":111,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.183Z","timestamp":1788435340183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wewin55.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 130396\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"1fd5c-Agw8b5KAoxXoQl1/kuFbzQzdobI\"\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\nage: 1166814\r\nx-served-by: cache-fra-eddf8230043-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130396,"size_decoded":131124,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 130396, version 1.0","md5":"cc1e5eda776be5f0ff614285c31d4892","sha1":"020c3c6f9280a315e8425d7f92e15bcd0cdda1b2","sha256":"476adf42b40325098fcfa8b36ab3e769186bb4f6ce6a249753e2e1a9c22bf99e","sha512":"8ea88eb326ce57117a24f88abf9ef1740ff55a1cf6d09d8bc1e798132d44bf237aecff44253ef60c9eb3fce108cf4f7d8ea27e6a763a9338c7d6204247b2cc60","ssdeep":"3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj","tlshash":"b5d312e3ae1bd5965ccf2adb8431382d5e861ceadd039ff265b477ec579182028c025e","first_seen":"2024-01-04T23:06:55Z","last_seen":"2026-09-03T11:36:49.924539Z","times_seen":17012,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/img/wewin55-home-casino-brand-14.jpg","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.190Z","timestamp":1788435340190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /img/wewin55-home-casino-brand-14.jpg HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Jun 2026 21:37:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a346508-15270\"\r\nexpires: Sat, 03 Oct 2026 11:35:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qesHYAgXGu%2FiUGW4rlfyELGb1gjIPpk5%2FhZB57hir1ClETsee4nb%2FpZLh%2FMc2xY4teJm6ywBAhtSsUmjhut%2BC9wSSMsixzoRsN%2B3T75nxK77nCJNsbz2tnmBMl%2FrQBs%3D\"}]}\r\ncf-ray: a35473cc3d11c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86640,"size_decoded":87095,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"dfde57a7cedb3759c946ceea1931f5b1","sha1":"d1ea128f4cf36f6a23c0ad8c0b772574af774bb8","sha256":"ed28c5ac1e967587b241007f12e3e14eb642effeedb5d107d380a5fce54dbb3e","sha512":"75830ea99730e7a13663c77d905d978e799d74079e759baa07693bc7397387b23dd1a0632da938d3c33ffb35c281f3ef35aa758bf5bad1b3020b9fd71f3d0b39","ssdeep":"1536:Jq090PCFMut3P/OP901zh2Bli++vRoD2acIU0NRgINr1zEjBQIkew4lYZ:J/9CIv2BliPoDGIU0NLNrdEzwoYZ","tlshash":"f1831297d794c0531ad2b5b33049269f5eb10f3e3845b5990ae2d0f85c866490bbdef8","first_seen":"2026-09-03T11:36:15.552134Z","last_seen":"2026-09-03T11:36:49.927565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/img/wewin55-home-casino-brand-01.jpg","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.197Z","timestamp":1788435340197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /img/wewin55-home-casino-brand-01.jpg HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Jun 2026 21:30:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a346360-16e9f\"\r\nexpires: Sat, 03 Oct 2026 11:35:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFCOAFqk5x4dAEV9hg2EUcl1KBNMxyqYj7sYSdCdWPKDznqxHwMLMZ38im37LgCV25Pyy32gK2sTH78h7iW25KnJOb8%2BQz8Fnd7SAxyAzWZEdSUUT6bpZ1IRXv8M%2FRc%3D\"}]}\r\ncf-ray: a35473cc3d19c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93855,"size_decoded":94072,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"11dee8609f03f9d3ac2bf6df5be9603c","sha1":"23ae8e6d83766031e42306ecc916e033d0adb9ee","sha256":"91b084678cd86eb7534aadf99ece5eede6315913791d8705aa70a4f11c3f8e52","sha512":"561b5bcd510ed8b4c8a66b6cd6997b93941370995b583f372c99eb94313e939b688c0d4c622d82a80442863e6f6dd736df6b43abd9aa1aa3febdc7182a1f9fb2","ssdeep":"1536:h+dvgjHPZk4nTg0PtbPKsWB3jswlrb67PEngi9GymuDhMEmC9iw216tL:8dvk+4nk0PNPWswZbeLi98EmC9ieL","tlshash":"a09312a8ca18a77384b01c1e377853645de3fc38179829351319df86bdda9d42b8a2de","first_seen":"2026-09-03T11:36:15.553724Z","last_seen":"2026-09-03T11:36:49.929211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":356,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.590Z","timestamp":1788435339590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\nage: 1684783\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":33987,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-03T12:44:21.03701Z","times_seen":27044,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":8,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Padauk:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.595Z","timestamp":1788435339595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Padauk:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 11:35:39 GMT\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":1169,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"815d30110b2532735aedd1c9776f894f","sha1":"5d66f6331749de4c1b83b39558e72f09cbc0a6e1","sha256":"fe193fc0d6c532450696f3da069480e1957a007ad2ec39b00b2b1e1c3c47133f","sha512":"d073a4c6fd59620b6a7df6ec5e094c7f63a99155b02cbafd6fec43aa4f81c4ec05b0467e6af5e20f16133f8d466544b78c8bbb23510c54446b844001e707dd5c","ssdeep":"","tlshash":"0e41ec920467d004dfc31dc153cebe32ee0e2150a160d5b9aaff18d8eca7ca553a6b4d","first_seen":"2025-11-09T02:18:36.012266Z","last_seen":"2026-09-03T11:36:49.916521Z","times_seen":19,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/assets/theme.css","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.597Z","timestamp":1788435339597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /assets/theme.css HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Jun 2026 16:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3eacb6-82c9\"\r\nexpires: Thu, 03 Sep 2026 23:35:39 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voALt0LIixPsQINFp%2B0Pj1WHUbiG5CgCOUHe5L0PDVt4KkGhwrY580iRTCbwL4e5bT8%2FUuPMn6NFbG9NewnQvo0%2Bb9tcqdzEYJ%2F6BYFIDOA69WwMn3eoYQK1SZnWjgY%3D\"}]}\r\ncf-ray: a35473c87cb3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33481,"size_decoded":7367,"mime_type":"text/css","magic":"ASCII text, with very long lines (33481), with no line terminators","md5":"37bead870f135b1c87e7b5ce00caa1da","sha1":"eda8486fb353ef03f9e0ea9a229903b253cb3b9a","sha256":"0f6b12339ea660893e372c4f2f1c50c3b1b269e634df73c4eda3895629942e02","sha512":"50c63d12c3620dc684b49bc1fd846959bf819152367fe74e3b9b76ae9a52c19628eb9125ed6c2a82b9f08c71388b5a5b4d9804c45ee67ead546305816722f92a","ssdeep":"768:m5piEtVEGE/EDEdELE2EhwWafx8rw/8NIo1zolZ0n36:m5F8TMYGwj+E7D6","tlshash":"55e2b825b350723df817a65e3ac5bb4c2534a041cb130e9cf67b99a44eda1fbd963b08","first_seen":"2026-09-03T11:36:15.556377Z","last_seen":"2026-09-03T11:36:49.921527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/img/wewin55-home-casino-brand-15.jpg","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.598Z","timestamp":1788435339598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /img/wewin55-home-casino-brand-15.jpg HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Jun 2026 21:32:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3463f6-1be37\"\r\nexpires: Sat, 03 Oct 2026 11:35:39 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0MO35ymwNF9ktjFfCVUOd7jpWeNkPjDjhoSMb8kAKC%2FZ%2Ba0eaK1ZNYBjKW1NiIjvQDD5spShWXWMkL%2FTCExEgOeoO0Or%2BX8QiOoYvK284wD0rmG0MB3HYjcMSKmpXc%3D\"}]}\r\ncf-ray: a35473c87cb4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114231,"size_decoded":114975,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"bd2cf07f966da222bfba24136a9ab13b","sha1":"66c85c5268acdb0f6757fc913e6cb1eb0908663b","sha256":"66f19fadce356edbf44a84b80b5a474f3888e7de6b265b55a48f25cbc0a6c79e","sha512":"9bf473ed16b60c5f1322d1131632ddf2eb95d02e9aed8e7fd3c2626b8d2e9bca1d4f87c26fe004ea454611d7750a18a95e21328d78ad2c063f5300ba3e23984a","ssdeep":"3072:qzlA8kSPnyWEbE9TPGzaUAp2EbR4p35Cl4hTgHZ:qlk+yWdIzaUAwayXTg5","tlshash":"b4b312d6a6d11a70fac783382256610c78113ba0dbcf2674c0e1be7571eafd437ad296","first_seen":"2026-09-03T11:36:15.557292Z","last_seen":"2026-09-03T11:36:49.926347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/assets/logo.png","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.608Z","timestamp":1788435339608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Jun 2026 16:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3eacb6-15a78\"\r\nexpires: Sat, 03 Oct 2026 11:35:39 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLK8CDeGX%2BgXqqzZeEAUxqiF%2BnoZz2K8ynsD%2B0LBmd%2F2jlctPjNRzyTlpR0XGYetM5cmv%2Br1MKzvD8KoZnDCddUDJ%2FyUllx6pEN7Pzu3kbkccvQUlQzx8G1Z1XFHipA%3D\"}]}\r\ncf-ray: a35473c88cb7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88696,"size_decoded":89246,"mime_type":"image/png","magic":"PNG image data, 937 x 165, 8-bit/color RGBA, non-interlaced","md5":"235aa849f1b6b79d108b06b6363ab794","sha1":"2b5b2e413964faa9a838ae3527182608494e3d8c","sha256":"d409c3d22bead00730dea05df4a070b6790e809cf368198619a988fed222565b","sha512":"9df5ed3a8d65505b0d488098c3fe13076dd98c4901a53903faee077f040c76c78b1c3ff4ba9dc0c1441cd1ced4ef315b20b5c9149cdd1fd09dee27d88c378dec","ssdeep":"1536:/TdsTZhsXqj9CorOrhutJTPB67gG+tICv6UpL22VfHL5SlmWc:/ZmQ6jdO8zp68ZtICvfpaWLIDc","tlshash":"b4831258c55f9347175379f7a502b11ce773b5a622be9af804dad6033b4034d1b8ae32","first_seen":"2026-09-03T11:36:15.558234Z","last_seen":"2026-09-03T11:36:49.918086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/padauk/v17/RrQRboJg-id7OnbxbEXh.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.180Z","timestamp":1788435340180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/padauk/v17/RrQRboJg-id7OnbxbEXh.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wewin55.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9160\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 16:26:54 GMT\r\nexpires: Thu, 02 Sep 2027 16:26:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 68926\r\nlast-modified: Wed, 10 Sep 2025 16:45:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9160,"size_decoded":9971,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9160, version 1.0","md5":"385efcc06c88a5a7b01ba40e433e6fae","sha1":"a9a30e286fc4474d49dc1292864f7ccdb65c3205","sha256":"e3c64a13c24be728363037bba1bdbd67c274d85b4ec362c16c7875e2ce991b99","sha512":"6086a3507fc0e1fac19a136676402a6f1c9b9b05364e24734509da4be7d26011dbcd20cbedbbc38ae2561062d1e46e6b662cda79eb8d14224fb99e2b1450d527","ssdeep":"192:ptrsZQeW05J/Ge6NENHAn4VW+io2EDyyUAWKmUbTndSfeAtzPn:nrseePoNUg42AyyULdkTdSfJz/","tlshash":"a712bf22a702bc7cc4c169f6799c37bf96b5451c46a3b76f58ca8832cdb3358164942e","first_seen":"2025-09-14T01:46:11.057239Z","last_seen":"2026-09-03T11:36:49.92381Z","times_seen":35,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.600Z","timestamp":1788435339600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 05 Sep 2026 11:35:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itSdjzty%2BjgctGXk%2FukrQPiZH1TaY6sOcR%2F4BNIo9uxbOnY0ZLqYFQlznBQH1%2BsMZd706zjB7GM2fDUoxVUq3VWCHyK%2FsbvEcJNWzPbFgyOJUTk8koKozJgsLLR1Zf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\nserver: cloudflare\r\ncf-ray: a35473c88cb5c272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-03T14:18:42.861784Z","times_seen":429637,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/padauk/v17/RrQSboJg-id7Onb512D0zZhFV4Y.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.178Z","timestamp":1788435340178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/padauk/v17/RrQSboJg-id7Onb512D0zZhFV4Y.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wewin55.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42024\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 15:08:22 GMT\r\nexpires: Sun, 29 Aug 2027 15:08:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:35 GMT\r\ncontent-type: font/woff2\r\nage: 419238\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42024,"size_decoded":42837,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42024, version 1.0","md5":"aee2c05813fe37a1ac0159b247c216e5","sha1":"bc63088721639b81d26a4364862fab7b483e7438","sha256":"5e4342af31c8174d55a7a90e95b270a5fdcf40f93e6d1c3940f5937caf50170b","sha512":"e2c0d8b1c4ad658ba12c4ef21895548443f4ac2932846771777e0471c33e5ac39b1a43d760a210e9b0292c772f19982ebefe0ec30775ecb5da7c330ed7893d76","ssdeep":"768:XiWDjrgbS0sIXeS15CIoFdWmxDRADBL+NoWW7Anaxjh5MEyqg:Xi33Mvwp+NosnadjO","tlshash":"1c13f236bb1a2b55c7ea5e329e2cd36fac00dd980449d373f0bb664560399d4b0227e8","first_seen":"2025-12-16T18:58:22.602732Z","last_seen":"2026-09-03T11:36:49.923045Z","times_seen":14,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wewin55.best/img/wewin55-home-casino-brand-16.jpg","fqdn":"wewin55.best","domain":"wewin55.best","tld":"best"},"ip":{"addr":"104.21.77.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.192Z","timestamp":1788435340192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wewin55.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 17:25:33 GMT","end":"Mon, 23 Nov 2026 18:25:22 GMT"},"fingerprint":{"sha1":"DE:34:90:95:23:F2:9D:87:0C:9C:AE:01:1E:E3:77:68:82:35:39:A9","sha256":"4B:99:0E:CE:43:F2:48:93:12:D1:0F:E2:DC:E0:F8:D2:AC:1E:B7:E9:72:D2:C0:BA:16:3E:1B:27:C3:31:F8:38"}}},"request":{"raw":"GET /img/wewin55-home-casino-brand-16.jpg HTTP/1.1\r\nHost: wewin55.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Jun 2026 21:29:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a346338-127f4\"\r\nexpires: Sat, 03 Oct 2026 11:35:40 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQzVH7eEL4sTHg%2FuRhZlSFbyXERTux%2B2JOYVhxuzJrGmJZGP4SmJSUA6CWv7pwftjAKGieNwNU1gMRiA8rKw16oCL2Vh6b4DEbU%2Bpuaz7M9vadPgauKhJvDoV%2FhzuQQ%3D\"}]}\r\ncf-ray: a35473cc3d13c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75764,"size_decoded":76408,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"d78717ff53e22c0b8f9d81704729ff28","sha1":"76c23f8cc2bfd318967940cb71814ba77206a4ec","sha256":"d7a110afb6a3a8f0295082e99c28a095ef7bc371b8e041073bdfd6d4cc3beb02","sha512":"0ab3901c04e041843f67bd342d2f7cad70d794b2156c8592d3aee2e7156eca833da6ee0d6c19ba4eb85aea5470019ab606aa871631af4dfa3f67993803e469ce","ssdeep":"1536:Oadj33i5MFtM6RGWHOBpL3e3ZnIZdf0hsnTj+ZiQ/q/F9gXs0DLC3+iP7/j2:OEjFtxRvdmZdf0qK1/q/F9gc0XE+M7L2","tlshash":"817312d8c763b07a8f697c32910c2af5358737361c93a567186c107d26c8ca936a7be7","first_seen":"2026-09-03T11:36:15.562072Z","last_seen":"2026-09-03T11:36:49.925095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"wewin55.best","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:39.593Z","timestamp":1788435339593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wewin55.best/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"17fcf-nuSWzJuqrli5jn/B60bjV42vgUM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 11:35:39 GMT\r\nage: 5526844\r\nx-served-by: cache-fra-etou8220048-FRA, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98255,"size_decoded":14395,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1d14ac4000dc4a8d3557b256248d9000","sha1":"9ee496cc9baaae58b98e7fc1eb46e3578daf8143","sha256":"4ffa6bea4304d2eda418683f56261685ed47bf00995039f27e5ad62d53938d2d","sha512":"cb098f6eec464b8709ec6c70097f9b089c1e79ec6dd38ed9614d873f9d9658a6e9267178fd9cdfaf6068d7d2780963d766695e56eb10f5dfff441e5bab444fef","ssdeep":"768:Tqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMR:KOocm4FJwZ5ijINRDlIia","tlshash":"d5a3eeba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2024-01-08T15:48:29Z","last_seen":"2026-09-03T11:36:49.925781Z","times_seen":4701,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/padauk/v17/RrQSboJg-id7Onb512D005hF.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wewin55.best/","date":"2026-09-03T11:35:40.176Z","timestamp":1788435340176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/padauk/v17/RrQSboJg-id7Onb512D005hF.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wewin55.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9100\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 11:35:40 GMT\r\nexpires: Fri, 03 Sep 2027 11:35:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:40 GMT\r\ncontent-type: font/woff2\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9100,"size_decoded":9907,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9100, version 1.0","md5":"29415c1f573e68910362deb64aa30ab7","sha1":"7ba8bb7f53e4e791828585ae258c2bc771e929e0","sha256":"50e4542be569f763363e6ffd35c0560c71e7bc5d51485e6603fb06d148ddf5d1","sha512":"18942479f7da73729d973425dc03c3b889646ae0a95f39c806ec009082fecd88d7dc313e57b87279b577b45f1b9427d6ab55ce33740fb15464ba733fe985246e","ssdeep":"192:cwORzbQT9b14wmNj+drLUGE4qqKlSqpf2Auvo/rzuVYrdh:cwIbQ114wm9iUGECKjuvbVYBh","tlshash":"f012af8fd86af5adf21fc839b26abc94fea2e039dac457022591f051c0eb14441be549","first_seen":"2025-11-09T02:18:36.017582Z","last_seen":"2026-09-03T11:36:49.922288Z","times_seen":36,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}