{"report_id":"bbdc90a4-9a14-4978-b1ea-6308709e34d1","version":0,"status":"done","tags":[],"date":"2026-06-30T21:30:02Z","url":{"schema":"http","addr":"001wintop.com","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"001wintop.com/","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"title":"001win - Registrar Site De Cassino-001win.com","dom":{"size":40998,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10507)","md5":"1128d7151425257b1f2f05ca4513fb66","sha1":"e57386a82b74119c8bb3354e3cc10d5855cb35c3","sha256":"998151063780b73456705821035ac2d6ac0837c79cbcb8b45779b95254b32c18","sha512":"4c9faf8e1757d835db5cf80899a84896175270581d565334c4826175fdfa476700bfc55850e3f323f1d96b3a204353a7046f4bd31446bced9074abc85b914964","ssdeep":"384:YdYANpPOFyv9OrFlcYx/rH0/DSkLYIImG75hhVjx+D3YJvXcOYSNDeNc3bkvnYdR:QzPO3IIXhhCTcZU4buxZT3Wcif","tlshash":"6403f97357cd593b610722d677f1a74a724a9a6eef134b65b5bb03b0b38fc84d812208","dom_hash":"domhashee720f0f328febe5b629656b18934e90","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"001wintop.com","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T21:30:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"001wintop.com","ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2026-06-30T17:33:05.553529Z","last_seen":"2026-06-30T17:33:05.553529Z","alert_count":124,"request_count":31,"received_data":1750494,"sent_data":15917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"static.addtoany.com","ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-10","domain_rank":28267,"first_seen":"2012-05-21T12:58:18Z","last_seen":"2026-06-29T15:04:39.298111Z","alert_count":0,"request_count":1,"received_data":81112,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"node94.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2025-08-10T13:29:04.56112Z","last_seen":"2026-06-29T07:28:45.186411Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":473,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"001wintop.com/","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9721d16a7c5c5cf0cceff6abd2c6792f","sha1":"9f6ed3882af94c814f522e10c82309772477463e","sha256":"79a8ef3716eb748fc97f7e3b6f0a5fe05d77247a2a29ff10b8cc232f5d96f806","sha512":"af0fa9067c57942bba22c9025e7410ce8aa166e3905c0b65ebb9f40c6865c1fc2c286f3ada780dbf925cc099a93216ee419fcfc6a1e842a271b8add0941e7845","ssdeep":"","tlshash":"86d0a75f354018bad74f00b91daec6cab566502568afc41549cdc5e98a24dec489eacc","size":241,"data":"","first_seen":"2026-06-15T12:18:55.119452Z","last_seen":"2026-06-30T21:30:05.385377Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c81e728d9d4c2f636f067f89cc14862c","sha1":"da4b9237bacccdf19c0760cab7aec4a8359010b0","sha256":"d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35","sha512":"40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114","ssdeep":"","tlshash":"c700000000000000c0000030000300000c000000c00000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-07-01T00:42:48.104502Z","times_seen":5572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/addtoany.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ee9f93f04575a4fab58566962962bb","sha1":"8aed5ff5dc0f3bf4e3af52d36f4f150f4a96d5f6","sha256":"9bbd49454237351594bd41e1a6194677be17eccc8ebce4eb60045e7d51ebcabc","sha512":"c1a762895b21ad9d4180d71c12bef80091cb4e1a540eb370aaeb727dd92a2485a4638c773639717a0cb96ae5ae9368bf7f904663eb196dae542b64c4a5953184","ssdeep":"1536:2OuCSsK4TDgbbKOFmcMR8UM6OBJ65rqRkiaX/k30LCprwJDgKo8IuqEcu/03Tka+:erKOFmcMR8Ud+qiaX/k3muwJDgH8X5c4","tlshash":"e1835c9d334a7c36a54b30bdb9ffa719e03b254aaf494444d6a8a8f425b4dcd3012f5c","size":83655,"data":"","first_seen":"2023-03-10T13:55:43Z","last_seen":"2026-06-30T21:30:05.384191Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons.29.svg.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f9ad7428701469c955cc4aba98921aa","sha1":"4c17465904f2845478bc7037d4241b93d66af485","sha256":"e30f848c353b8ab801c18d2109527cb32a27f145262dccb3cd4db9f309cc53bb","sha512":"7839bfe0e82229554cd5e376b864ac6a54f487f67dec1a8f445c9ab85d3fbf6cb1511104c608d944a5e21a3143b77fd5796ffa285a6546272d714b91ec583c64","ssdeep":"768:7Yva40AdxdJN5SawzsJVeExx1ZGnobnPDupLz/uGWAA5xAPx20bY4iUGCPofJTeT:l47JNrw9EGKS85620brEwqqgCJUP6","tlshash":"d873d9d52324a39c95c78f5ddf2aac95670fb0fd7a7685c496afc768604b9c8fa02c00","size":80183,"data":"","first_seen":"2023-03-09T05:57:06Z","last_seen":"2026-06-30T21:30:05.368136Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-01T03:18:55.280398Z","times_seen":383053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/jquery.min.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d16e147b5346147d0f3269cd4d0f80","sha1":"4566b5815f47f976c7c3d3083c600ad5561b6fc0","sha256":"2e945ebcd9b955e7c543ba4ad41e8f7779a077b482a0207db74bd6ded2021d17","sha512":"0fe5de77f19213aed8b6db18fc80f80fcea320e1c97cee40dec9cf5187c0c13237bc94f110071fc27a685920ffbcd71643cf41753f744773afd02784a1a0432f","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Y/:bIO/e2D5c4LgtImLja98HrA","tlshash":"0093e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96380,"data":"","first_seen":"2023-03-07T01:18:53Z","last_seen":"2026-06-30T21:30:05.373481Z","times_seen":2876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/custom.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9665dc6a3f68f0487d22f8abc2dec36","sha1":"e72dccaa3cb8d0993dec0e2abbdc3c81a09d1858","sha256":"f9bf8245b56e7a8541e6a57a5c2e0e765019efb93cc2cd91de7535e54ef72294","sha512":"b2e81d2762a0080f82cb4415afdbaa2607ec78042eba27477df90141b09b5e2be3eba49d74a20d5f9de38a6a67cbdca2316496e137d9cd2acf0b5eae1e96a935","ssdeep":"","tlshash":"d331ca08fe2c9ea950bbe33a4a7a0058df284c22ab451149b0f814a02e641983f5fd6f","size":1753,"data":"","first_seen":"2025-01-08T21:59:28.910088Z","last_seen":"2026-06-30T21:30:05.374193Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/top.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.076Z","timestamp":1782854968076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/top.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d3f-4db\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWaoaa10zJ3TYvY55p0RxNGo7E%2BQYAQagC7ucxV1n6hJiT0hz7lgtJJrNnyre6uagndSPdWiplkY7K4lfBn3%2FAqVlQHxn2pCpDc7PqjPeuHs860OWFeNjtKLmzCyG9uT\"}]}\r\ncf-ray: a140443eab6e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1243,"size_decoded":2008,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"d604ae7c739f24ad9547f0a50b552c76","sha1":"04b1590aec019280225aa015f7aa08c22d546cc8","sha256":"2807dfe4d555c637a4e61e60e46d014d0950f52e512d8e391db1c566d8892f5b","sha512":"deb4e08c116ffce50ff6ef0a8ca1fa1ab7b61195c9206ac8a2a68958fc105b2bbbd74e4f2e27680943c259703b45c3db4c1bea8c05393946e92a80ca96ade232","ssdeep":"","tlshash":"3121e7f0ce02d50bb211c3b41e74d5610a798eda62c4989ed354128ed8f69d38a666f6","first_seen":"2026-06-30T07:25:53.12971Z","last_seen":"2026-06-30T21:30:05.363338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/icon1.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.077Z","timestamp":1782854968077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/icon1.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-5b1f\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HGgJLOKp%2BFTqSOHERj0gbxH%2FZ12wylbYtpP8Cm9kF4wBKxr%2FIez5b0dLVnLWE%2BBlKNzBYXZkxSEFnNBdaRDautDSXgssX%2FwvZBL%2F6zsEQG%2B1hMzx49w1JIvoBAdAAj5\"}]}\r\ncf-ray: a140443ebb705a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23327,"size_decoded":24103,"mime_type":"image/png","magic":"PNG image data, 163 x 151, 8-bit/color RGBA, non-interlaced","md5":"dd6f74f2a023f7f11408634a1f2071f2","sha1":"5182ca64796dfe203552f4fd9d6e3fdff14c2168","sha256":"bb3f0b084ce4fb25e53dcf9355d5b83a06f6217986e44d61fbb0f619edf542d3","sha512":"8689353fe5a7f361308407ec39d832515608eb3a1632602487f0e6754972809c3bea92a103246c1487e9b92cf52c640ee2faec62934112da67c88a8b4ae40f0d","ssdeep":"384:Ggis4y+gw06onq9mVb/pFR48CLflqEK65eSNdvXATIm7WVBGgXM9BRC4GLOldAKz:GgL4M6onqEt/yLb7LvQtyVBCwaPuvr7m","tlshash":"a9a2e0b29dc9776e4524e45331d8ca7e89e3049e0dc5778976acea1a07bf80de7c2094","first_seen":"2026-06-30T07:25:53.121983Z","last_seen":"2026-06-30T21:30:05.364347Z","times_seen":3,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/promo1.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.093Z","timestamp":1782854968093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/promo1.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-e5cf\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWu%2FLZYhzb%2BEks%2BReMP0SRNxTxvlmjMiLeg8lYh0Twv6y6%2B4XYsCC9zvJAs9YWeBwyAOz%2F97jQZj28x2L0wR1G4XckwT4coOeOS2uvn4SWTUoHnvrozTbE3JG08Bx8UM\"}]}\r\ncf-ray: a140443ecb7e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58831,"size_decoded":59087,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 600x284, components 3","md5":"ee4c7ec9e2c8d56d86534268df9e4ac5","sha1":"d1adfbf3f532ec7990e3a214e28ac44d203fc3a0","sha256":"0a319ff1020bb65b6f4b9c9d4e23a5ad9f7d19bf0db2280b9820e8ba3a32dc30","sha512":"5ed7941f531da46da3c4fa469ab1f58532e48f3710ed400ad08377eb232d9a4141661660422148d22b0e477e5062a1f1f61a875c6c33bd45f38f3c52a6428521","ssdeep":"1536:D1LJHj8iYPVZz8jssP3xxunPiqcmWdpf6knfvaSQF35:n8iY/SX3xqR2nfSSQx5","tlshash":"754312d3227ed1ea71f103f63b897bd266d80650e49ffab0d898190ca55b62bd301972","first_seen":"2026-06-30T07:25:53.152703Z","last_seen":"2026-06-30T21:30:05.365196Z","times_seen":3,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/promo3.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.096Z","timestamp":1782854968096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/promo3.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-d978\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22cwqFtpZEDlSBHeLGd8motMJ0HR1cLMeCjHKuEUioGR%2FWM7YBIHBkfr8g0dhLwIkLvyRfPLojZ0mbIIFv48JbljmRNsBRq7%2BG8iN4QBCKk6eA7bjEOW%2B%2BxCla7ovVFK\"}]}\r\ncf-ray: a140443ecb805a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55672,"size_decoded":55931,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 600x284, components 3","md5":"fd35e494445bd7fdffe0fa9d34d55feb","sha1":"2543f23b11f45800c76176ca688c1bc09c54c285","sha256":"1b4b769038e9a2e3f941a7c272e01992d0dc321b2258d6db953abba29d544e70","sha512":"09a3f9448c1a769e79f4f664241769b931e777bb172d8044f5ac6819c0be9ea162ba73b9a89167cbcd3d7d5a068673118492a17f3cc7d4690cf1fdcbed4a4e54","ssdeep":"1536:DezkughKOT3f4TsoGM/dqsnUWEKW9Dj6XwBJhYfeO:LDUsml3+9Sgx4eO","tlshash":"b943026aba19c7e6dc224c93fa184b8b5dec34ca1af05c0e87d84d6357fc65a84dcc16","first_seen":"2026-06-30T07:25:53.126057Z","last_seen":"2026-06-30T21:30:05.366091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/images/spot.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.154Z","timestamp":1782854968154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/images/spot.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/static/co25wkhlq6/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QF3xFL1tK6YDveH%2BpMQVnl%2FHcvDnHlg0nblTpTeQe9wln0CUxvonNEmX1TINZdr9QiJDWRNmo19l6fijTnLPMBMmzwz5GkotlVMI3KM5HVRZ8lLqnmGZZPN90jeNgkfv\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a140443f2b8f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1583,"size_decoded":1406,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"16107fe36a50a34876e6d7f050573469","sha1":"a3ae8105a10f65340cdc83ad24f969c88ca5cfde","sha256":"f146e829c8c675e001576858712136b5d81d4358da7b4671b57dc73f384911c7","sha512":"df600c47175be7f621423876ba4dead8bb70046d8ef24fc2fc8250cfeccee9f6c3b0a10eef2ac853de64e2dfbd6cd209a1d3ec8abf182db097e8de2890589307","ssdeep":"","tlshash":"2931021dd64201466133e3686fb39358fb86542783038abd3edd72629fb915481a3f8c","first_seen":"2025-11-08T15:30:57.541529Z","last_seen":"2026-06-30T21:30:05.367152Z","times_seen":24,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons.29.svg.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.743Z","timestamp":1782854968743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:31:15 GMT","end":"Wed, 16 Sep 2026 01:31:03 GMT"},"fingerprint":{"sha1":"C5:61:CA:02:96:1E:EF:74:7E:9B:A1:6B:79:5D:8E:98:E0:B0:11:5F","sha256":"A3:82:78:47:4C:CA:89:30:69:57:2E:C6:F6:12:67:FC:FF:88:93:99:36:CF:66:74:3F:25:B9:49:A7:C1:05:2A"}}},"request":{"raw":"GET /menu/svg/icons.29.svg.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGBJxJ83rhoHrFbB0ngDHHsnPd93UIWpAmsLnYMCwnrzeTrzCW3yn%2BSxIinJ9PStng1rU%2FKE9hcGjDzyYj1A7Ay9Qci32qViRI6ubwm1uRAB\"}]}\r\netag: W/\"2c2bffaa2ff29c0e95645b158d728b4a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\nage: 11514\r\ncf-ray: a1404443ad5056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80183,"size_decoded":34771,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f9ad7428701469c955cc4aba98921aa","sha1":"4c17465904f2845478bc7037d4241b93d66af485","sha256":"e30f848c353b8ab801c18d2109527cb32a27f145262dccb3cd4db9f309cc53bb","sha512":"7839bfe0e82229554cd5e376b864ac6a54f487f67dec1a8f445c9ab85d3fbf6cb1511104c608d944a5e21a3143b77fd5796ffa285a6546272d714b91ec583c64","ssdeep":"768:7Yva40AdxdJN5SawzsJVeExx1ZGnobnPDupLz/uGWAA5xAPx20bY4iUGCPofJTeT:l47JNrw9EGKS85620brEwqqgCJUP6","tlshash":"d873d9d52324a39c95c78f5ddf2aac95670fb0fd7a7685c496afc768604b9c8fa02c00","first_seen":"2023-03-09T05:57:06Z","last_seen":"2026-06-30T21:30:05.368136Z","times_seen":119,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":63,"connect":69,"send":0,"wait":67,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/icon2.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.079Z","timestamp":1782854968079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/icon2.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-7c44\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fPjPIh%2FOH5VxtguUPxvgNNKZwQZwHQQQj3e0hrkhOTMafDSWQ4lG%2BvArpKx3nXSFoZru5i16O80V9s6eNxBhXwvl1hTkIw6WUQdVvLMZD8K5IkAgmw9ZdtbaPRpt40F\"}]}\r\ncf-ray: a140443ebb715a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31812,"size_decoded":32578,"mime_type":"image/png","magic":"PNG image data, 163 x 151, 8-bit/color RGBA, non-interlaced","md5":"4507b375814ca0fe839334261f4a5914","sha1":"7391a1922cf4ef571ab63a176fab7df3bf364676","sha256":"22c65dfda349737f6700ced4cb08e4d8bcac8cf04a363fbed500ad8c4d1c3405","sha512":"e88dd1a193d7c6e58ecdbd0d59970419fb2a2c891ef57c6ab2dec738f084020c5039e7dc1a1b18ea7ba729828b1d0465825ebd361eaa9aad4e27b2888de2b0dd","ssdeep":"768:zLdf/8e5axaL+cVXS6LUONbtmYd9YEWmU/1zAJMa9zXhBv0eEf84F:zLdMeExc/ViqtmSYErUNzAMWjhBvL6","tlshash":"20e2f15c6e4f999915a03530d36b4dfbde443a3c01fe11fac994539efaaf14c41680ae","first_seen":"2026-06-30T07:25:53.131401Z","last_seen":"2026-06-30T21:30:05.369057Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/vsport-icon.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.085Z","timestamp":1782854968085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/vsport-icon.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-9fb\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qt8DzWZBF83U5gOCEQ152mTPWMWvHj%2BZHwKfv2A%2BwzA64CYlgqFhOWx2jbhnF8OJkQs%2FAsurSACnc50oLQyQokXChu06GWOEweove7i5iV%2Bh3dqUoiRLT5fmXO2LZrWp\"}]}\r\ncf-ray: a140443ebb745a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2555,"size_decoded":3324,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"6b66e98009444f1d5169de795a956fed","sha1":"b59288f098c8e177a737e4dfb2e75b435414387f","sha256":"996b9bab755065d8b105b65dddaef8c9496d4795f7de359d239b12ba5b3364ad","sha512":"b458eeb18c487d885c82e1db38ca130bbfddc6e0ed9c7b801da8b395253fd124fc69ececd2a0b16c8762187396f108582d7032cac6e6ca3c495c234a05aa1a7a","ssdeep":"","tlshash":"895119ab0da394b6e73f1176773314506a0d21ae8436ab042ee6cd763da068218f80d4","first_seen":"2026-06-30T07:25:53.140608Z","last_seen":"2026-06-30T21:30:05.36985Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/esport-icon.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.087Z","timestamp":1782854968087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/esport-icon.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-c79\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0wrOa4avjsPWLUpbmk8Xfr6TsCe%2B%2BsFbBfQ9TfhVB0Z8rxoQNFsvSfFXEI8fC0cxNRCjPcJy8C3AtSMfo94fl5xG8GAwZQ96wPRCu%2F%2B4jnmFAf7aUvtd4U7pfdZ%2B3mv\"}]}\r\ncf-ray: a140443ebb755a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3193,"size_decoded":3964,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"3ab635e49f762f99bb7985724ead1782","sha1":"5056af3c0c916fc34c1f86e22270460cd51165d1","sha256":"6eeb8d2352f423c53fca92bf0406eea490c63b88e58defcc5e6fbcf24d938d32","sha512":"10a6b88532842d86e2271e1b1b1ea3bfc71a1450ad042b92128020b64f18b24ebc8974d69b92ad979aa01cf7e19419ec3d830195412b8c28b62c1313e3b5ff75","ssdeep":"","tlshash":"4e616ca3356df80de71989eb49fc8172f007a543bed32f05020e0e201740a4a1b7abb1","first_seen":"2026-06-30T07:25:53.136517Z","last_seen":"2026-06-30T21:30:05.370792Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node94.aizhantj.com:21233/tjjs/?k=8qw1rl29ju6","fqdn":"node94.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.704Z","timestamp":1782854968704,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=8qw1rl29ju6 HTTP/1.1\r\nHost: node94.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T03:18:57.83266Z","times_seen":16878252,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/style.css","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.046Z","timestamp":1782854968046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/style.css HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 05 Oct 2025 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e27d3f-370e\"\r\nexpires: Wed, 01 Jul 2026 05:32:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nhIcc13GZmAqDdhLFddAdpXGR%2BZZ9R1KzyPC2QXxVbqp2Lwp3YxTxvlIGFMloWcHi3CoGNJ5PTRCs6vGvijPWa8R69MVohbH94J2HdMaZM1vTXHom5FZmhld1TcPKHt\"}]}\r\ncf-ray: a140443e7b665a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14094,"size_decoded":5221,"mime_type":"text/css","magic":"ASCII text, with very long lines (323)","md5":"d1d6ac7e8dfeb5caa29515ab7b94aeba","sha1":"fdb924d156ac0ce76c14acd95b750a1ff6890e11","sha256":"ec918590e379070da609c07aef64b4932a45b5d3ac3dafd57020730da1608bda","sha512":"e6001803e0ec2995c5e83abd28c35578f6d6dfb6f501996763ab7b01fc1891088bf3a811018be8a1d767fc8dfb4efb034701aa3e87c858f6153feb62538515b5","ssdeep":"192:ssC4hwKgNOQgHXMwHRZnqVEbv6V4Fuw6ApDJX+CUkI7b0t7mKVC0ZuZWa2mivqIT:RHwKgNArcYI7WaKGWa2miCIr1qk","tlshash":"8c52b862de41310df02bc699f6e5576cc3189042a7462bfeb62e39e5d78e1dc407eb88","first_seen":"2025-11-02T13:32:51.700066Z","last_seen":"2026-06-30T21:30:05.372758Z","times_seen":49,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/jquery.min.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.058Z","timestamp":1782854968058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/jquery.min.js HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Oct 2025 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e27d3f-1787c\"\r\nexpires: Wed, 01 Jul 2026 05:32:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21wPNvn8Ufs1mOSUZ6lNZHGpR6QtDXk483YvSejVPUjwfrgw%2FxwOf%2FA8Dv7rPgSPqyWDYBqtFn3ZcBfzR7E4bhLmV65VKb%2BEkHM1Y0sHrbjmY8yBC3nRush3%2FFuqiTn8\"}]}\r\ncf-ray: a140443e8b685a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96380,"size_decoded":38317,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"52d16e147b5346147d0f3269cd4d0f80","sha1":"4566b5815f47f976c7c3d3083c600ad5561b6fc0","sha256":"2e945ebcd9b955e7c543ba4ad41e8f7779a077b482a0207db74bd6ded2021d17","sha512":"0fe5de77f19213aed8b6db18fc80f80fcea320e1c97cee40dec9cf5187c0c13237bc94f110071fc27a685920ffbcd71643cf41753f744773afd02784a1a0432f","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Y/:bIO/e2D5c4LgtImLja98HrA","tlshash":"0093e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:18:53Z","last_seen":"2026-06-30T21:30:05.373481Z","times_seen":2876,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/custom.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.061Z","timestamp":1782854968061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/custom.js HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Oct 2025 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e27d3f-6d9\"\r\nexpires: Wed, 01 Jul 2026 05:32:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJ5Gl%2BnMGBTKtjPOTK4bHKrfcR8m5QOT5%2BiCM3ctD0RYGGsjoBfpbgTzVq%2FkeYESfr6LpRNwXaA94C%2FtQTacWIstqtSRe5phnEf52%2BU1%2BL7aKW%2FNqYIa4uyEGRiXDe8Y\"}]}\r\ncf-ray: a140443e9b695a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1753,"size_decoded":1444,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f9665dc6a3f68f0487d22f8abc2dec36","sha1":"e72dccaa3cb8d0993dec0e2abbdc3c81a09d1858","sha256":"f9bf8245b56e7a8541e6a57a5c2e0e765019efb93cc2cd91de7535e54ef72294","sha512":"b2e81d2762a0080f82cb4415afdbaa2607ec78042eba27477df90141b09b5e2be3eba49d74a20d5f9de38a6a67cbdca2316496e137d9cd2acf0b5eae1e96a935","ssdeep":"","tlshash":"d331ca08fe2c9ea950bbe33a4a7a0058df284c22ab451149b0f814a02e641983f5fd6f","first_seen":"2025-01-08T21:59:28.910088Z","last_seen":"2026-06-30T21:30:05.374193Z","times_seen":55,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/7games-casino.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.092Z","timestamp":1782854968092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/7games-casino.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d3f-1f4a2\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INz9YnvTOsndvmjy9INDRP7L6KF4r6XO0rbQ%2Fb8AWRGxfWOFSnsihUU7xE0if99e%2BHqg9lBMH2qoYL5CfzEScGS8pL4waQDPD%2BUe3BokyJqYq4TidjmYuhb8SgJnArzG\"}]}\r\ncf-ray: a140443ecb7c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128162,"size_decoded":128574,"mime_type":"image/png","magic":"PNG image data, 572 x 348, 8-bit/color RGBA, non-interlaced","md5":"c3c046f224389ffe6a90f76d948d8391","sha1":"2b7a75471b127e1a79160ac7ad9d70b1070724a8","sha256":"57e2e48d2ceee6f367a76b02e5571a577c8f385ec4c6460c24b694371d78535b","sha512":"983693c0cdc2044a049655027b8b71852d620cacbd1d53b7b59f0c56a614aabd2668d4de8170208a43bd4b82de7ccf8ee62d6f7f11d8001628c02d6eee825fb8","ssdeep":"3072:ijeMSH/TSVhBILiFF/XcVf5r5ekpIz7AtACySNP4wDb9zT:ijsHmVSGPcVBr51Iz7AtJyS6wZT","tlshash":"79c31211d090fc6a303e471b4daf442ce73eae025e355a6aff76e998a625277c378443","first_seen":"2026-06-30T07:25:53.113317Z","last_seen":"2026-06-30T21:30:05.374894Z","times_seen":3,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/promo2.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.094Z","timestamp":1782854968094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/promo2.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-e81c\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bq%2F5hJD%2FGZipylJg4IAxryM4eLRt1mUsX1QjwrdU1WlTcSf98Iion8VyEvVJxrURukpchbhH%2FXVyU0%2B98a20QlKNluGIPEgy0ql7OKOH7pL7I4P26fHbqxu%2Fgvx%2FyG%2BH\"}]}\r\ncf-ray: a140443ecb7f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59420,"size_decoded":59735,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 600x284, components 3","md5":"3c105156eabf22110c7de85ea840ab9f","sha1":"6a0283a051362dcff1cdbcafdc080122dc5d5e96","sha256":"26c5202e5c37c452a8bf2aa9f10fdf56ec16aca14cd27caefc0417e4b802e552","sha512":"ee39d444105feadbd433ce6098400f63b3be8a0c448f9ece3868a344f6bc4bff6e31dda9d86defe14097cfbaaebfc72b49d42198195b4da7dd77761b30da2865","ssdeep":"1536:DvpUNxXUYRaVOMF1TBNhfuctW7SrreWwjsf3tDW:vjPuIq2rtwjE9DW","tlshash":"5343029c6c73a4d0760091c263cd52883fd9e9727b49cb5ccee3696f864479f468c388","first_seen":"2026-06-30T07:25:53.142027Z","last_seen":"2026-06-30T21:30:05.375698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/promo4.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.097Z","timestamp":1782854968097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/promo4.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-e725\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2elrDckrS07ihHsOqfTbGNo8d8OnU5iE89O7Z2f13kKFHzJY47veVTqYLADVHCg95THoZ8LLeFXaE6BL%2FHfiPEV7f6WxR8gaitWpC1MySJ2Om82pW77EzYqDQhyCwHP\"}]}\r\ncf-ray: a140443ecb815a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59173,"size_decoded":59557,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 600x284, components 3","md5":"8635821ea1dfb15db69b1932c30f539c","sha1":"a9eee5b72179fd9411c90aaf8e60c95029d63114","sha256":"0cfa6cb6797f43b93926fb5ab907022f946416b3249bbca49f150f771903d257","sha512":"b60ec55ed4d7d0695dd227576c59d67992dbf82777fc1c6f4759be6520b8728225dffc2c08524f9c8c2c798c05970fd3b90b76942e9ac568b176e35f0c12434f","ssdeep":"1536:DDf6QZEYIZCsO+RmFRbjzXw5Nb+fPJ+/MetUzzGLR0hZaXMh/a5n:yQ9mgFRfzXIb+IUzwhiCt","tlshash":"ab430271c17466f93efa06144da5ad6fa7c941637ef3a0508ae2b94ffad1e80812c90d","first_seen":"2026-06-30T07:25:53.116469Z","last_seen":"2026-06-30T21:30:05.376293Z","times_seen":3,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/images/home-bg.webp","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.152Z","timestamp":1782854968152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/images/home-bg.webp HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/static/co25wkhlq6/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAYC6UNL6SAAFakEb93H7TYhxMz%2FUJMKB1FnWjFi68sUKEPux4eQ51kOglH0Q9nu0jo7Lcmf5gVnODLp6wh27fkqsiFeN%2B5b9YBr2bKAGPXwnF0ZAQuAZd6EMJW%2FCBda\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a140443f2b8e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1583,"size_decoded":1408,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"16107fe36a50a34876e6d7f050573469","sha1":"a3ae8105a10f65340cdc83ad24f969c88ca5cfde","sha256":"f146e829c8c675e001576858712136b5d81d4358da7b4671b57dc73f384911c7","sha512":"df600c47175be7f621423876ba4dead8bb70046d8ef24fc2fc8250cfeccee9f6c3b0a10eef2ac853de64e2dfbd6cd209a1d3ec8abf182db097e8de2890589307","ssdeep":"","tlshash":"2931021dd64201466133e3686fb39358fb86542783038abd3edd72629fb915481a3f8c","first_seen":"2025-11-08T15:30:57.541529Z","last_seen":"2026-06-30T21:30:05.367152Z","times_seen":24,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/sport-icon.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.083Z","timestamp":1782854968083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/sport-icon.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-cb1\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfMkh4X2OqpfBHLrV6oj2aJLTQvWIr4pJe7oadQLUFamIMCrf6LyDtTqRFI6Evh%2F3HIuzvvjcgmZ5tmaCYCXIhUhsCtjhE9M8h7Xwr8G37TxzwiDUTkgAB8jPTs98hdI\"}]}\r\ncf-ray: a140443ebb735a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3249,"size_decoded":4012,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"6febd7bdee13f806dcc4aebcea72c386","sha1":"cbf5657545f2e0a8c1504fdd01b857f165b148b5","sha256":"75cfb6a6e634143c04a2d9e1be479a5f60d393e0b8011cb6326316ce5c627041","sha512":"d03baf154f12a6e2c5b2b2285dd14020f5e45c4a5e3182c9a8c5dfff689d3b7dac42ef43e19982fa4530055d54470709dfae76b3179cbe0dbca9fe54ce1b04db","ssdeep":"","tlshash":"94615c576982acb59e2c2328feeb060ff73248078534997030dbed279db6c6409a54e8","first_seen":"2026-06-30T07:25:53.150811Z","last_seen":"2026-06-30T21:30:05.377037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/icon3.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.081Z","timestamp":1782854968081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/icon3.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-7126\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3K%2Fbn1RBEtNGbb2qZd90nye2n%2BvKZmn2LDgOb1j4wKReT4nnscAhKTZLTf5t0vH%2BkyEWtG0Vk4QsY1WhUBkiaTehZNrJJJwmpkmNu%2BwpQ5f3IgGHDAzQrUpz1xaGTdoX\"}]}\r\ncf-ray: a140443ebb725a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28966,"size_decoded":29736,"mime_type":"image/png","magic":"PNG image data, 163 x 151, 8-bit/color RGBA, non-interlaced","md5":"c00aa4d4713776f5bc483db90e84734b","sha1":"5a6dce46237421b73686bf1df80f537782c154f5","sha256":"a38dc33c7c2991018a38c5a49a1dc6147acbc20faff6ad8afcc87f3a8e39480c","sha512":"bccc9efd3474f7e2d8f1a8eb9673aad1690c3d900ec18913d8c92681d37f7a34756a2b6ec4dc02c8c6c5e2099704d192ff8bbc8685cba0f31376913bbb75d4d4","ssdeep":"384:eio2i573Qp2x7eodSNhjvHguiKec7KdpPZh3/nVTPRJqV8NXjklYFEQoU4KxIETg:e4+73DddKh7Ble4KvPZNxRJ1x6RUdE","tlshash":"08d2f1888eb1b21a4b7b8936138ca4605bb61d774af3d03f87cd4c63ad91719d645ec4","first_seen":"2026-06-30T07:25:53.148691Z","last_seen":"2026-06-30T21:30:05.377645Z","times_seen":3,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/bank.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.100Z","timestamp":1782854968100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/bank.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-d5d8\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8XAa4Ngl0DgvAfvkyy%2BEh95nCORYQ8z52YjRYCSovH3%2FvnVdz7sDN7mRSq84yfar5wvsvfxHvexjwn67FgNcAzBcLNeyraV%2FoEcbf4C%2BABLZUvhICtf4z5wmax3tUyl\"}]}\r\ncf-ray: a140443edb855a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54744,"size_decoded":48326,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 684x490, components 3","md5":"a8f2254194a3513b90896d245a94cde3","sha1":"dc00f6c34d09db032fbcc5f7fab90c44eb3ebb04","sha256":"f9daef4ad94b90918ec5f5c05a13fe394e4de3ac7d4e0db4cb75295b27a420c0","sha512":"3f9f280857440c9b4e33e468a1337bcc2237152a60bad8355f4cc00d838d90a00b4977961db0ebdb7e5b99c0331b6731a66a45b888dca1f7ebbe7d9b3a2ad163","ssdeep":"1536:pfhdlwbAmiIZCxQwJGo2JOVhrIOWZXNqmIzLN:phy1raGwcZQmsN","tlshash":"da33c0138c0b47d3b474e2eefe170e8c5b0a1f8cbac525ee12561e873b985a10d5e16d","first_seen":"2026-06-30T07:25:53.14395Z","last_seen":"2026-06-30T21:30:05.378211Z","times_seen":3,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/favicon.ico","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.941Z","timestamp":1782854968941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/favicon.ico HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"68e27d41-c62\"\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLMhUscBSZb6WSwMoZqAgTf1lV5yZnFPqDFAhUmV4uMDKTkdJqtj%2BA8l0x%2B5rkafcodXoj53CKMCQIBmowwNbHEnKleA%2FPp1kfSc%2FgNhkdMA3Mqvh%2BLwXDEsefF41Wby\"}]}\r\nage: 6608\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a14044441c555a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3170,"size_decoded":3862,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"3585448fad527ec09df342d79e5ae80e","sha1":"790ad2583420272d3ac70ef186c2f2e33bb05e8d","sha256":"4035a5a4196786dd9d3ac68f074c48bb2e06eba1d3a7fcb9e575d9fcc6ea0bb9","sha512":"3be94b2ff8ed5cf17113f7ea0521f4dae9f607707dd62506ea6a3aa06e5654a456a95661ffe0a5de8f3f218b04a9ac46b0ce1e3436c6aa0d87841d6001c198d2","ssdeep":"","tlshash":"08517eddd0852e85840f5b3a720b01f7097a7e8daa1bd6c1757860b17d99476f43c207","first_seen":"2026-06-30T07:25:53.134864Z","last_seen":"2026-06-30T21:30:05.378902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/logo.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.069Z","timestamp":1782854968069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/logo.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Oct 2025 14:14:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d44-7df\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1PqIRancNCuSdP%2FYGX%2BhF8vf%2Fbr8V1hyPTuEU7%2F9IhXAhvEmz1Jad6giYOqiuZ9N7sVRspT3%2FS1hMK7KH7xmWtGxCTjBM927%2BsvyKLQvgN7vgFQjkLP4IBqMqP23ByR\"}]}\r\ncf-ray: a140443eab6c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015,"size_decoded":2689,"mime_type":"image/jpeg","magic":"PNG image data, 400 x 100, 8-bit/color RGBA, non-interlaced","md5":"0b132ffac8ad2069e41f10cfcc7c2930","sha1":"fa3ffbb9c8532c523ff8cf87fdef9ec766fd58ee","sha256":"61b00bb8fc4cbac05c0c7c6a6ffe88abc8d3375e27c1ad8ba8de65c7207b359c","sha512":"06a5dbc6dca80710875dbe294bee2911333f8ca2f45e11e26cf7cc3a06d6fe0253997f33d3a6a69ab48b4229d500dee65b7e43359e1257f07db0a5a267b646c7","ssdeep":"","tlshash":"38411b9328514cdbdd9cda71354276b3b8d13be85c97c708aa4ddd1a2d0c16b1c1a43d","first_seen":"2026-06-30T07:25:53.138664Z","last_seen":"2026-06-30T21:30:05.379482Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/slot.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.089Z","timestamp":1782854968089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/slot.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-486e7\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cu13iXcqFuFj5caG3Vvrwgkk7wmGqA%2FKfrJyHt%2BRwRihqkIEfrJwjjHyjvY6MadR72G22%2Fo8HCNMaW5TAP0JTarpadYkLvf94V9aUvc49M%2B0tZnWgbr9ksGqb3d%2Bcruq\"}]}\r\ncf-ray: a140443ebb765a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296679,"size_decoded":297326,"mime_type":"image/png","magic":"PNG image data, 572 x 348, 8-bit/color RGBA, non-interlaced","md5":"ccefa0a0c3b28528a989ae8a7377b357","sha1":"67224cde1ab07869c7e49b8d1f7a411e94e80ba9","sha256":"6965cf9da17c26c560567b71119c1811a75baa31fac16f85bb77b573f69ea979","sha512":"73695b439f466a1ff0e0380d016c9a2e0059cc38be6abba882bbc9577b91cef711c722bbe379cc78b16682c052fa32d71e29515ef662649448295b670ee9a1c3","ssdeep":"6144:58LAZn9S32r6hQJF/pwjzb26Fcg7lV5dxCZPRWUVCth7R0Ssz:5tZ9S32QQX/pwjuMddx+PRWUMlfA","tlshash":"9854233379365c464fb8ba66233763ca9237cf8ba9c32575c87d889f1c6090a455237e","first_seen":"2026-06-30T07:25:53.123727Z","last_seen":"2026-06-30T21:30:05.380052Z","times_seen":3,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/icon-ios.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.098Z","timestamp":1782854968098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/icon-ios.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\npriority: u=5,i\r\netag: \"68e27d42-368\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gC%2Bx7v%2BwOpOYtYrRiIS8BEFWzMy%2FikYy5h%2BhkwTBXGEsFlJIvSvCkykR2IyM4eLDBLduu2%2Bo7PbyqbTatvYioRHSLvu9Bcz4t2DyPkDtFBYR0t6ygyb4K7VyBJjYy5mo\"}]}\r\ncontent-length: 872\r\ncf-ray: a140443ecb825a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":1609,"mime_type":"image/png","magic":"PNG image data, 59 x 59, 8-bit colormap, non-interlaced","md5":"09e561b7f6beaba91011a1630aef11c0","sha1":"68c5a01a9ec26f207ea67c7d7feb928b40b7f330","sha256":"68de892025555172fd795ce8ccd82fd057abee566eacd375412356bbc631cbd0","sha512":"0f5a1ae8a8b388726376293b4dfd293e6693f7658f240af5678a19928c9dc4c90e4b7084aec079db7972b23bc77653262bf1197995110091a075f484a30bdc2f","ssdeep":"","tlshash":"5b11464659395c5d8591af649a4515589033f8c44c2137d67c7ee3337bb06e695002e0","first_seen":"2026-06-30T07:25:53.15479Z","last_seen":"2026-06-30T21:30:05.380665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:29:27.224Z","timestamp":1782854967224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 21 Nov 2025 14:47:35 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JO3yBuY3XNUeq87n5IYU3CgVTYWfRTiH%2Fc3kozJ9DAH%2BCYILvs9Jexi2wU7H8%2FNcT0rZhXQJFup570f2rQEhIv0%2FQ6B2u5DC48TQvc0Oo2RFvtCdajhBwauE9wKwXXkj\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a140443a3ad65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":21961,"size_decoded":7298,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (530)","md5":"08f2ccaef6b12952e036f7f108ef84d3","sha1":"07694f884db34f6fef6770bf3161b912a9730566","sha256":"34a7d4ad79ca7217a501578f681c56fb808262d9524f86b81b107e72d79ea70f","sha512":"d408f54c217523b8bd1a731ab4d5da983eb0dc80839eaa135181b383a160d09c356057c09e03d5b1d65aa46bd21786671e10c3edabe9e4dba9e4e1f9b2645cc6","ssdeep":"384:+/wNAYIImG75hRVjPEpX0OISBDeN23bkvnYdh+XkfT1M4Hd3:tIIXhRRQhYebuxwTp93","tlshash":"50a275701bcd2937125302c217e2674bb6ce8e62df27ca96b5f707a5b786c90c926319","first_seen":"2026-06-30T21:30:05.381271Z","last_seen":"2026-06-30T21:30:05.381271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":69,"connect":72,"send":0,"wait":425,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.053Z","timestamp":1782854968053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 02 Jul 2026 21:29:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5L3EKnVwyGWnWpOOz26JaehI8C%2BPPQp8TZOWBgdnWQLxmYB4LKZHTN%2F%2FQ6QErgB%2B%2BdPYzebxPElrG1inoflWppjwxrtUzX6AMcq9RpLSrkaAn9ZRr%2BBbsU2jGwzkfA3M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\nserver: cloudflare\r\ncf-ray: a140443e8b675a0f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-01T03:18:55.280398Z","times_seen":383053,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/logo.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.073Z","timestamp":1782854968073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/logo.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d41-5ba20\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MfpoN%2Bsl6QlKkVpWibt0mhkWeFmWf7fOu4tnK3UmXwvXeRShNAPSriHeWYXIrCbWUudw8o1FAHH3yxS89xLj7n26R3MUXUkdIW4cvi6JzYE5HGVePbulyZSO0WVyFUg\"}]}\r\ncf-ray: a140443eab6d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":375328,"size_decoded":376198,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"de0d3f83b724bd03dee658ee073e3003","sha1":"821bc4cf7eab69237a6833ebd062dfb75decc04d","sha256":"84bf01bb12e13af443081ad39cca3ff10495dea9d5c642b504eaa47ff02b466b","sha512":"a8c9c58da9dc26d0f5ea7354f038ccbaa4d0c8c79bc5c4b8385827091039d47c24ad797b807791b434a1359ab723ec3e8f2483e0ddc18c79940ea00c98b02d88","ssdeep":"6144:Y7hqDtWepGk7INXtzkpLfk4OIamiow9So8NUtH5WLYjyW/0YvEpogUtzColO6KDa:PDtWWJ7MWlJadowIoeQp/WpNU4olO6Ew","tlshash":"c58423b98dbd05bdd49c8f83242c891be168f07127698180bb7afab0247e757d4f6324","first_seen":"2026-06-30T07:25:53.12057Z","last_seen":"2026-06-30T21:30:05.38307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/icon-android.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.099Z","timestamp":1782854968099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/icon-android.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\npriority: u=5,i\r\netag: \"68e27d42-32a\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYOGvz6i%2BNSDe5isI7ABdojb8khJyE0do6TPgwartC%2FxIs6T%2FCrCfft0P7cMqogc1bTFJ986Y5kVTzv5uduofiJmvQtngUzSZS9iAhiJWvCc4w6ge9QE5Un8hPT46EZk\"}]}\r\ncontent-length: 810\r\ncf-ray: a140443ecb835a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":1545,"mime_type":"image/png","magic":"PNG image data, 59 x 59, 8-bit colormap, non-interlaced","md5":"783f76c61010bc27f8d298137c592a9f","sha1":"2163952f50be97a730f840e486aa4a2f7a500a25","sha256":"72fc8b305b310d81817d93f4042802f9a182170039b51925828d712e20cd8bfe","sha512":"fbe4abdf825a94d560c7ab62ce8a439c53d84c41e25155d4c863b5af655493b95d654ba9cf42e55c3b29711610af47866171c4e57aeeceea07eef5658cc7eb25","ssdeep":"","tlshash":"990165a18c3f401f4c10f875d263aaf986f8446e9211ba0cb755fc0f78f0914ab9e130","first_seen":"2026-06-30T07:25:53.1331Z","last_seen":"2026-06-30T21:30:05.383631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/images/bg.webp","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.143Z","timestamp":1782854968143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/images/bg.webp HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/static/co25wkhlq6/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rV%2FrCmKNvuYP6wh3o0nzT8agB8hrONoX%2FMtqp4czprI1SA10JebrouLz6bLeUs03sPxJJMgDLecjKXs15uON%2FdcqBZHdG96YK%2B%2BTYy0Qvy0WTc%2BrhmEOrTnKDtA1ppob\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a140443f1b8c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1583,"size_decoded":1414,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"16107fe36a50a34876e6d7f050573469","sha1":"a3ae8105a10f65340cdc83ad24f969c88ca5cfde","sha256":"f146e829c8c675e001576858712136b5d81d4358da7b4671b57dc73f384911c7","sha512":"df600c47175be7f621423876ba4dead8bb70046d8ef24fc2fc8250cfeccee9f6c3b0a10eef2ac853de64e2dfbd6cd209a1d3ec8abf182db097e8de2890589307","ssdeep":"","tlshash":"2931021dd64201466133e3686fb39358fb86542783038abd3edd72629fb915481a3f8c","first_seen":"2025-11-08T15:30:57.541529Z","last_seen":"2026-06-30T21:30:05.367152Z","times_seen":24,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/addtoany.js","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.064Z","timestamp":1782854968064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/addtoany.js HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Oct 2025 14:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e27d3f-146c7\"\r\nexpires: Wed, 01 Jul 2026 05:32:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXPqKwrle9WbGvVxIWWRYgOY0xJWNTPo5tmqv5B%2BnNWSj%2BN3I%2Fi6gGSf5XVYO0rouA8Wl%2FdKj0Go62pmqS8KeL4f8ndJspGyfw3GYRdbRrtqrc8VQQXs8Zmg6n7k222r\"}]}\r\ncf-ray: a140443e9b6a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83655,"size_decoded":32222,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"03ee9f93f04575a4fab58566962962bb","sha1":"8aed5ff5dc0f3bf4e3af52d36f4f150f4a96d5f6","sha256":"9bbd49454237351594bd41e1a6194677be17eccc8ebce4eb60045e7d51ebcabc","sha512":"c1a762895b21ad9d4180d71c12bef80091cb4e1a540eb370aaeb727dd92a2485a4638c773639717a0cb96ae5ae9368bf7f904663eb196dae542b64c4a5953184","ssdeep":"1536:2OuCSsK4TDgbbKOFmcMR8UM6OBJ65rqRkiaX/k30LCprwJDgKo8IuqEcu/03Tka+:erKOFmcMR8Ud+qiaX/k3muwJDgH8X5c4","tlshash":"e1835c9d334a7c36a54b30bdb9ffa719e03b254aaf494444d6a8a8f425b4dcd3012f5c","first_seen":"2023-03-10T13:55:43Z","last_seen":"2026-06-30T21:30:05.384191Z","times_seen":53,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/co25wkhlq6/pagetop8.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.090Z","timestamp":1782854968090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/co25wkhlq6/pagetop8.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68e27d42-4c342\"\r\nexpires: Thu, 30 Jul 2026 17:32:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 14215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thWQ0ff8wFVQdp%2B%2FEDgETUVsr%2B774N%2FM%2F3JGbFwRuQBXrpXjyyUOYlINaAJBzOxWcUDMKHBzOcRR36avufwaZKdSBHQwv4ajFToKMpCQmNgC2xa2tTINu68q56W3z1%2FT\"}]}\r\ncf-ray: a140443ecb7b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312130,"size_decoded":311245,"mime_type":"image/png","magic":"PNG image data, 637 x 348, 8-bit/color RGBA, non-interlaced","md5":"837f27d32ae09e08bb0fda1c79789807","sha1":"88117d5bac7afea403043e9c36f259cd95e4ea53","sha256":"386eb73e8f179365dbeceaa3844bd409a3aeb2db02f50fc2d61f7fbe355d0033","sha512":"f03fc07f572925e860211525e5bbe57b12303c2bc91e54af4301f5f0305ff550a4943240d7abc25dc5f2dfa15af54ce46f650a6445224575a72dbf71f6051d98","ssdeep":"6144:1IOrAPwQE4j8eFHuwcKZdkYyLpgTKopPO70Nwt8sDR4l6y88nWdHA7:B+7EYdckdkkk70Nbsd4l658WA","tlshash":"c36423ba8bc00fe79b681ad56454cbf00ff2649dcf79613848d2e9ec50235e9c8526db","first_seen":"2026-06-30T07:25:53.15804Z","last_seen":"2026-06-30T21:30:05.384804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/images/home-bg2.jpg","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.155Z","timestamp":1782854968155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/images/home-bg2.jpg HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/static/co25wkhlq6/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrWv92ug50houBEABnNewO97O9m%2FRItM0nz7DMzMkCgdlSuUJqNxvw2Wpl7ilbO4LJJt8%2FxXfYcJXk5RDRur5mrvWVfZttIF%2FOsQqLId8nkVFULN%2Bln%2FTod6TOkgGpYQ\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a140443f2b905a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1583,"size_decoded":1412,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"16107fe36a50a34876e6d7f050573469","sha1":"a3ae8105a10f65340cdc83ad24f969c88ca5cfde","sha256":"f146e829c8c675e001576858712136b5d81d4358da7b4671b57dc73f384911c7","sha512":"df600c47175be7f621423876ba4dead8bb70046d8ef24fc2fc8250cfeccee9f6c3b0a10eef2ac853de64e2dfbd6cd209a1d3ec8abf182db097e8de2890589307","ssdeep":"","tlshash":"2931021dd64201466133e3686fb39358fb86542783038abd3edd72629fb915481a3f8c","first_seen":"2025-11-08T15:30:57.541529Z","last_seen":"2026-06-30T21:30:05.367152Z","times_seen":24,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"001wintop.com/static/images/er.png","fqdn":"001wintop.com","domain":"001wintop.com","tld":"com"},"ip":{"addr":"104.21.12.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://001wintop.com/","date":"2026-06-30T21:29:28.158Z","timestamp":1782854968158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"001wintop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 15:24:18 GMT","end":"Thu, 27 Aug 2026 16:19:32 GMT"},"fingerprint":{"sha1":"DB:94:89:98:A9:BD:28:0E:49:FB:C6:61:E5:65:09:4F:5C:8E:F2:BC","sha256":"BE:BC:C0:58:B1:61:21:11:92:21:20:3B:B2:79:10:5D:8C:24:78:20:A9:94:43:B8:82:23:5D:BD:F8:C1:59:5D"}}},"request":{"raw":"GET /static/images/er.png HTTP/1.1\r\nHost: 001wintop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://001wintop.com/static/co25wkhlq6/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:29:28 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Cv4TrRDE0b3jxrrRWkP7plvbSnXZZdUbKA1v2MF4MuwJJnurhLlKH0uYU1ILfJ3kAXLSoKZm8KlyuzQ3khzvVMyTsjya6x8eK7gYfzDgaY7MCbTmQixZQcyfqOeJwGl\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a140443f2b915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1583,"size_decoded":1402,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"16107fe36a50a34876e6d7f050573469","sha1":"a3ae8105a10f65340cdc83ad24f969c88ca5cfde","sha256":"f146e829c8c675e001576858712136b5d81d4358da7b4671b57dc73f384911c7","sha512":"df600c47175be7f621423876ba4dead8bb70046d8ef24fc2fc8250cfeccee9f6c3b0a10eef2ac853de64e2dfbd6cd209a1d3ec8abf182db097e8de2890589307","ssdeep":"","tlshash":"2931021dd64201466133e3686fb39358fb86542783038abd3edd72629fb915481a3f8c","first_seen":"2025-11-08T15:30:57.541529Z","last_seen":"2026-06-30T21:30:05.367152Z","times_seen":24,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"001wintop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"001wintop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}