{"report_id":"bed63bab-44a5-428c-9a6a-42bab1fc0c3a","version":6,"status":"done","tags":[],"date":"2026-05-29T21:26:34Z","url":{"schema":"http","addr":"32win-32win.com","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"172.67.191.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"32win-32win.com/","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"title":"32WIN - 32WIN.COM Ưu Đãi Độc Quyền Cho Tân Thủ | Đăng Ký +322k","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"32win-32win.com","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"172.67.191.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T21:26:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":11856,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"32win-32win.com","ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-05-16T04:26:50.659681Z","last_seen":"2026-05-16T04:26:50.659681Z","alert_count":26,"request_count":26,"received_data":2828417,"sent_data":12607,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"traffic68.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-04-08T13:34:46.55136Z","last_seen":"2026-05-22T16:50:09.829645Z","alert_count":0,"request_count":16,"received_data":896156,"sent_data":8828,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":6,"received_data":178746,"sent_data":3308,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"traffic68.com/api_seo_traffic68.js","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"539f4275f3a6fd96938eb903a8b31bd6","sha1":"c23c2c9cc91afb75b35eb339376ff1dca984afb3","sha256":"02b2c96bb9ee3e90b6e56721eb3c4c2c2ed077ba49778d87b00f5927866ae848","sha512":"89fc7949ff2f123aabe9cc1dda8c39fc013a1e2a5499002f1754b1f60f9019c2215e56e78c37d9d8807322e9a2d8041c85e637fb72ed3226e91eaaf4732a486c","ssdeep":"6144:tH9ynwVMRCynNQbtMlSFrPnAQW0s/v6JM5wHXeyXvh9Jj:XMRCynMFrPo0s/v6JM5wHXeyX59Jj","tlshash":"37644e122af07c4623836fb73b1bb5d5ed1a29aab4448c6bd305bc50b2f4532e6d1e71","size":322948,"data":"","first_seen":"2026-05-28T07:05:12.967566Z","last_seen":"2026-05-29T21:29:14.591026Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a68c64db67f4156186d3d811cd093f50","sha1":"0b6d64c63f6a15cd9ed23ed84714b02819bfd692","sha256":"71d85dd9ac0a6515968f023e30ef861ee9324d2126780eb9a92905a6de060230","sha512":"93ee0efb4b054f95cfb4a440bda9299a7753fe6f4f4d7c46bfe5ad8e3d9def10fd528ab8353a11760af6acfe37c13567358473b66e414d213ec9a3219acbbffd","ssdeep":"192:q8gGRTm0kwiSCzdbV4nz/UDYPX5ShdBkAV/eIO0LDTySDH+tdaTQxwd:5nXSr+ye0","tlshash":"1f12428d1cf3312695a3346e4bef400ef661a593414eec20fd4dc7141fa09a5abadbda","size":9364,"data":"","first_seen":"2026-04-25T19:21:54.425557Z","last_seen":"2026-05-29T21:29:14.603338Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-29T22:05:44.311558Z","times_seen":14785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-30T01:57:14.368252Z","times_seen":354640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-30T01:58:39.08205Z","times_seen":805760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.19.5","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","size":16237,"data":"","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-05-29T23:31:08.712483Z","times_seen":12036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=8e60d746741250b4dd4e","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4255cbc3ddf1c27dacbd4860b3782c3","sha1":"fa17cf43be7ad4814efc774f8f9d8a6a9a5c8221","sha256":"10d17b852c0a0ab3de4638a2b0fcaee7ed4632a04fb126d388e871bffd0d0854","sha512":"e1dd1119f545c4c2ff24eb34ea1c0ec902abfab92b35abfe75a382ab7af5c065b88ad021b7a0d57ca31a839588e1fa4d485bfd3c59011c34d0057ac94b66cfbb","ssdeep":"1536:IfDJqH5NQ8kNSqcp1U8EtmoYrNqK7kSBed3ZRm:MoxjUvkesedy","tlshash":"1133e728729070fd01ff61a7f13fa32432376565b0064054b53d98fa2d6ad5e26a3fba","size":52859,"data":"","first_seen":"2024-07-13T11:25:57Z","last_seen":"2026-05-29T23:31:08.683438Z","times_seen":4409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-29T22:05:44.301549Z","times_seen":14792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/flatsome-js-js-extra","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"74df068bcb496f230233b1c98c2fc94a","sha1":"f03f3d0ba6164086f251f2de9357713dd76d192c","sha256":"a44f29aab6b6eb31a108960b9d734849d7e76bb7b1ce7f4518d2d4b573116ac8","sha512":"4f7d54835bcd83b5280dd8fc77fc897012a7f02d578dd6baf6d4b9afcef7adef50b357be881b26b76148ab481661bee4516b38db8b914bcd63e5969a92caedd1","ssdeep":"","tlshash":"9551be79e31da12d95c7c0b6df34bfec87253131d0447520adff48399192c6832aa519","size":2503,"data":"","first_seen":"2026-05-29T21:26:38.766137Z","last_seen":"2026-05-29T21:29:14.600521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-05-30T01:57:35.791877Z","times_seen":76688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-05-30T01:57:35.80837Z","times_seen":42252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-30T01:58:39.063929Z","times_seen":872991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a084ab964045a5dc169fab0e7b6926c","sha1":"d4b1156e6390000965ddf7ce039ff2b8325f7fbe","sha256":"7fff49c512fd4eafac03461e478139b6ce76dc3cc105aed7a36c092064f33d10","sha512":"bfb459c905a4194e2be6ace5da9759840c8355397fd99c5732e124a43b0894b40e7a9047e640dffc55cf7c3d6b978a0cce7d24b13c0832f1d7178e324516b1d6","ssdeep":"96:0vcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SW:BN0LE0+1lfYsvS3","tlshash":"2181969ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274a46","size":4170,"data":"","first_seen":"2026-05-29T21:26:38.768901Z","last_seen":"2026-05-29T21:29:14.606968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-30T01:57:35.806747Z","times_seen":248790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-29T22:05:44.300098Z","times_seen":14807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-29T22:05:44.310378Z","times_seen":14800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-29T22:05:44.300786Z","times_seen":14798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep.js","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"534e328cfe5a97f214fc8aecc23ef8a4","sha1":"f94f2d24f8deae25c40f4882220d474f59f9d2fa","sha256":"9679d2b616e10a5a7070d0bfe6064fa62ec914763ebf0b514c0abfc59cb97e39","sha512":"bb86e2026e554251d86fd37675b920aee0c36cec1a2acb79815d3fe101adba4036fdbeb01dd03343f627eb8c4e0b986f3fcb76159aeb2d16ed6a8fd677ca0a94","ssdeep":"6144:o0V1GlKTua0eQbFy1nXBI+OJYyETxTgBTvTBdV22ms26mo2mhF22v2/VhC2WmHh2:oG1KWunyLnKGgBmEatgyU","tlshash":"44c4083a65332024045742af776f9609b63850537c09f8e4ba6d87042fdea1cd6f6fea","size":550114,"data":"","first_seen":"2026-04-08T13:34:53.338709Z","last_seen":"2026-05-29T21:29:14.585907Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2026/01/du-doan-ket-qua-xo-so-3-1-cuc-chuan-xac-tu-chuyen-gia.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/du-doan-ket-qua-xo-so-3-1-cuc-chuan-xac-tu-chuyen-gia.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"141dc-69b5089c-71b54;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82396\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dA7PF9NM%2BLEHcM2D5LsfvlMdTfk%2FyDTjTMACHJ11F6kTWNdSO21BBeofJSe4d42A3wjl%2BH%2BhqmrlS1pXlMlXEVpStKXh67IFeI4yMIUqIwJaiXxj5oiQNpfBfReZ%2BAvDj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ebf190b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":82396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be305cbc14a6e26fa0b99c87d369509b","sha1":"0a9a8707986a40d6af8523b59c2f55931c78bd7c","sha256":"cae4b6ba811f90aa13a1dd5c2d4be59956da38826b252724398e7c6902715031","sha512":"ac953b0c8256d2a5fe75c6285cf82b9ebedc3cce165bb135a2784ba729ac7978f2008910ac625a6823f3688f3db4e630594ef6dbbe93eb8d5142904a736e93ee","ssdeep":"1536:yxojX9TJghzdDUVg2dn2SbDlA2pQUMTDhrtk98A9u7YIzQioQhqt:yxojtG/AVJ92SbxFpeTDhrs5ZKIQEt","tlshash":"ad8302123d29a3d6dbc4af70433f85d6b8b3de999a0c9026be49543d234bed45606d03","first_seen":"2026-05-16T04:26:55.468908Z","last_seen":"2026-05-29T21:29:14.567999Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":619,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/game-bai-3d-32win-trai-nghiem-giai-tri-thuong-lon.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/game-bai-3d-32win-trai-nghiem-giai-tri-thuong-lon.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"132a2-69b5089c-708e8;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78498\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:18 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQGSywvqqUUkPk9rDC%2FWVECZgBklKkwMRlTLo6nAhuqxmnjBoYywwv45LttXkNxBm%2Fl8CxfuuOG3hTSYdRm2F1aJ06nRo9RL8WU%2Bp8npzevRVBr93Pk4ZnI2GctpPKrquHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ecf1e0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"951bd57aaf4142175b5f6c093fc0487f","sha1":"0627be8bb31fe61e0d77575a9c0b2f558c29f396","sha256":"1d5ca1e6f0dbd51f1e0517c67fcb4ba224ba9ca97eb2250bebf4d22bc24b3907","sha512":"5a3d79b3ad6c00d32cf78a385dccb0abcf4d2ff252ce7f6eddc7f479836c820707e4386feb0cc14c522d40cf9f54509bb4b8e24db4e566a633505bfc770abf0c","ssdeep":"1536:EuAsidVJbFsDHSihQFWWzUi5fokjenDYt0GS45bv4:ZA7vFqHSihsQiK9DYt0GSYv4","tlshash":"4973125b937a71d8f14a34181be31e929202c0cb9d7a4599fab25b0fe79efd03617302","first_seen":"2026-05-16T04:26:55.449744Z","last_seen":"2026-05-29T21:29:14.588188Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2199,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:26.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"POST /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nContent-Type: application/json\r\nX-Session-Token: 1780089975.8e70fcdd27dc8822\r\nContent-Length: 258\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"visitorId\":\"63ac8034ab95040ac97defbcb304e392bae69a54a2b5b560470f43190b9ee5dd\",\"_ref\":\"\",\"_np\":{\"navType\":\"navigate\",\"hasGoogleParams\":false,\"googleParams\":{},\"pageUrl\":\"https://32win-32win.com/\",\"hasCfClearance\":false},\"pageUrl\":\"https://32win-32win.com/\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 21:26:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"d-YHISmnPiR6kucVONsyHT73c1TKU\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZyBOpqex3WRDFgpfCyw1tKJjSuAkYh6gVLJhtCFKfkxgK6QftwR54KcN5LMNc4%2F0TRPvjYlPVch%2BLDx2n%2FXZ0p5LWoewv%2BWVQskBqa8XEdF50sXBMCSA58tI4K9HNRY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a03893cdadd535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b15c059c3bc397b2b9378d6f9b2af96e","sha1":"6072129a73e247a92e71538db321d3ef77354ca5","sha256":"843b78571dee3c34ed39faa49bec28157fc2687027f5775ad51a7055b662feb4","sha512":"523cd191081db4c2dba20cb5fae4de27b63ab22347d4983bb6e09aee4b42c39ae813a09837297bf2d371c482d5cffe15bb6f82b7f436b737472046583f674d3b","ssdeep":"","tlshash":"b36000000000cc0c0000030cf3000300000000c03c0030c0f000000030c30c000c0000","first_seen":"2026-04-28T05:43:27.505871Z","last_seen":"2026-05-29T21:29:14.569234Z","times_seen":20,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T21:26:11.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:26:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://32win-32win.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://32win-32win.com/wp-json/wp/v2/pages/11\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://32win-32win.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWGKdyrsEckdWPqppYC7GP18JAKm0I2%2BXPmaBBRc%2BtmvbWrcXGQkUUvPyWh37tmBPDqkp6TClAv8gpUePtXVby1hbzYttpPSlJbWDA5rwwK2NRfiJNUyVQtCvtOOb5U0LhQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a03893717c522efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77116,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3577), with CRLF, LF line terminators","md5":"0a89591cdd2d493377d7b0f097fb9f52","sha1":"d09b45f533d1ebd1077a2e488f53b8edd0140f87","sha256":"5b69303ca1f4acc13ff3d30674d90583669f7ee8906123a7f433448ff5fde218","sha512":"928b38c1a0ea979e5c4f1224a82419ff1592a2af4161f54c17897e9ded0111db1ff6fde6a165fcb9c4d0fb76980c6851a739da60aa1868c9d2cbbba4a58c9d0d","ssdeep":"1536:/OnP+wI0Tpo5GWWFFXxKyxypEtaORFt9TIBMCYOvWu2cl5t3ct2YwMB+L6HaK4:/+P+wI0Tpo5O0yxRjChMB+LAaK4","tlshash":"3b73fa734bcd683b022742e69415774ce2975877cb128da1ffff01998fd2ea26923609","first_seen":"2026-05-29T21:26:38.714754Z","last_seen":"2026-05-29T21:26:38.714754Z","times_seen":1,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":950,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"15601-64ecd5ef-1153bc;br\"\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgCGfz%2BJLurUyLy6qJKbBHegZ9Lf%2FS2qUgd9d0El4duyJebvpUwG%2B8XUY4NMnx%2FsTF7gX2HAhDvIoIdq90Gkvx9gFbe0nDsdgrpnzLCuVlHMBrIT8PbkPwXTIvXkGA7kKjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a03893787e070b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-30T01:58:39.063929Z","times_seen":872991,"resource_available":true,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1070,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/sanh-no-hu-5g-giai-tri-hang-dau-voi-hang-tram-gameslot.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/sanh-no-hu-5g-giai-tri-hang-dau-voi-hang-tram-gameslot.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"15b92-69b5089c-71326;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88978\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kv9Ab9xE0BeKnoQ%2BoUQs3I%2FoNvERfAcQja0BIqKVDqi4HWFqDryO%2BmxxM5QQFedAONsfSayST8XjsYsePLIAawHHySNLeDXs4tOMQd90PgTCcilZp0reK%2F8lnwNG4oWB7Oc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ebf1c0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":88978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9afc4173620211badb9471fc8673ed9","sha1":"502806460919a85d24684edab234a2f63b08c02c","sha256":"b48cd2e2c67d6c2d3bcc254784b73b0f45e2260e86dc447633af4eb0cfa56aae","sha512":"5e6b6f67ca3e5152dab96c53d6218bda0ed6d3b14e12b1e0e81e6f20bbf1a49c50e77ba61eab7181552b95c359b2c8749d1862c518330f88fdf3fa1def6d8a70","ssdeep":"1536:JTmB0qbbtpTpgdOfOn8JUMZxAOre6XL3kGfBnr3J21xkcC+xQukUq:JauILTp8h8CMAAe64GZnrc1qcC/uO","tlshash":"ac93123d4b6c9f030f06f71ced2c4a26604d52b6c5349ea67519a2fd63de05db37a40a","first_seen":"2026-05-16T04:26:55.461922Z","last_seen":"2026-05-29T21:29:14.574043Z","times_seen":4,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":628,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/ban-ca-long-vuong-trai-nghiem-dai-duong-quyen-luc-bac-nhat.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ban-ca-long-vuong-trai-nghiem-dai-duong-quyen-luc-bac-nhat.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"1453a-69b5089c-70722;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83258\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6F0op59vEGQFW7YS6V0fUsvihMHk%2B9PMDQN7dBnPBQi23CYhT%2F4lSk6O7Iu0nHKAZZkIZ%2BqCgtUnsU1EFWcCyaV2vB3pQB0%2FHTHp1a7D3RodCF2BJky4HcrBAu63c5M%2FolU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ecf200b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c4ca932acffe529b97f7769bf45dd43","sha1":"31c4c160796f9f468689cc74dc07c606ba8b971a","sha256":"04f654af1c55edfcbe9ae6ad36f6e7eaa179d26bb9fd92009348af5cbb3f4ff9","sha512":"c15dd335e91782544903cc7d97c6dde7e06f9d5cd717a8c687cf4452f31637b109fe6dc6b7c6bf7ba4c6a5a623c0f8e6afd9c6934e86991c9169f4b7a71f4939","ssdeep":"1536:K/VIGFPc73t8Qpj99NqnOGoU0RNun8sTkHBm/WYA5qmwiyxML2Vqt8QeWd:KN5Itlpj99ZGBiNunVTkHBzYA553yxLS","tlshash":"0f831287e03051dc6676296217fb0dd5ab8008b06be49d8e8fd93c13bd47d0277aaec5","first_seen":"2026-05-16T04:26:55.429469Z","last_seen":"2026-05-29T21:29:14.58239Z","times_seen":4,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:20.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"POST /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nContent-Type: application/json\r\nX-Session-Token: 1780089975.8e70fcdd27dc8822\r\nContent-Length: 258\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"visitorId\":\"63ac8034ab95040ac97defbcb304e392bae69a54a2b5b560470f43190b9ee5dd\",\"_ref\":\"\",\"_np\":{\"navType\":\"navigate\",\"hasGoogleParams\":false,\"googleParams\":{},\"pageUrl\":\"https://32win-32win.com/\",\"hasCfClearance\":false},\"pageUrl\":\"https://32win-32win.com/\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 21:26:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"d-YHISmnPiR6kucVONsyHT73c1TKU\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdEeHVTz9ZSWtRqbnSz4NFCyyX5NsZhZKbzZ2kHt8%2B4p8MDDGh%2F9Gzz%2FIZiZ6RPAg70tii2hstnS1wEpWtSTLj3twRTJ5CXY8evjlYpAW14OwCeMRF%2BaGjdhU9rCgQFw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a03893a8292a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b15c059c3bc397b2b9378d6f9b2af96e","sha1":"6072129a73e247a92e71538db321d3ef77354ca5","sha256":"843b78571dee3c34ed39faa49bec28157fc2687027f5775ad51a7055b662feb4","sha512":"523cd191081db4c2dba20cb5fae4de27b63ab22347d4983bb6e09aee4b42c39ae813a09837297bf2d371c482d5cffe15bb6f82b7f436b737472046583f674d3b","ssdeep":"","tlshash":"b36000000000cc0c0000030cf3000300000000c03c0030c0f000000030c30c000c0000","first_seen":"2026-04-28T05:43:27.505871Z","last_seen":"2026-05-29T21:29:14.569234Z","times_seen":20,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:23.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"OPTIONS /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-session-token\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 29 May 2026 21:26:24 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Session-Token\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGnMGTEAwhUgNN0VNyuO2Bo2sEnmVD2VdTo%2BZ6FIRc6j1xb%2BjzlEc5G1wu7SL%2BH01ZXbqgQivBcX8ArFHY6Qbsa3kaOHJR13Ew18lr4YLdwObERJn%2BHEW84MfsT1GfC2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893bfa8b035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:25.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"OPTIONS /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-session-token\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 29 May 2026 21:26:26 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Session-Token\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnbopK7dLTYoViE5mumzBsMi9AHZ9rL%2B3e3m7esnfNIyo%2FyGEovCc5yQC4gPYz9ohjXisg7dWpSjfTuEwdPm0UmJZCq%2BD%2Flj3PLxKwCQLGgv2JF5C8DEapTH9rC8dzs1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893cc281235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome-child/style.css?ver=3.0","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/style.css?ver=3.0 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:14 GMT\r\netag: \"12f-69b5089b-70210;br\"\r\nlast-modified: Sat, 14 Mar 2026 07:04:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 168\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:15 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8N%2B41mlFOew4XDZ7T7cQLJI6dOrSVRI0mlPhvg49hK55GRRuK91OEJzE%2BjAldpEnGUaaWumfH4efQAHF5AQmZ3pMfVvOyN%2BVdEqihvkdO3nmFJBkA5d6oJAL%2FiSH30gED8M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a03893787e060b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"97ea2d751f6f88abaa4144804c209088","sha1":"fe7deabd8c4a06e58816fd9424e17ad884cf778f","sha256":"61971a06f7ba6959fa232b1137d1de182bf156368ca45164f90dfb1a48941ab3","sha512":"014371a55720b72dc47ac433d2a6da81713918c9d44bf4c00d13160b361b57eeadcc378d9228693e0ee8cd423183a0e5e648c9374d725ae317c4a62068cb1379","ssdeep":"","tlshash":"f0e02bd064d19d0c5136530b047602c893b07b106776056ca08c3568c19ebc508f8ec1","first_seen":"2023-04-06T15:55:49Z","last_seen":"2026-05-30T01:57:35.80786Z","times_seen":6721,"resource_available":false,"data":null}},"time_used":3038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3037,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/banner-32win-1536x480.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/banner-32win-1536x480.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:14 GMT\r\netag: \"cef8d-69b5089c-7074e;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 847757\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbheK0rZbNkoC7Bnx%2BIBeJzkXqfve5RajxDVlY0AC9L6CwUbQmwQVpdKhp3FcVPdkIuVGs8sgU1KMVkeZ3WBJfgKPgPNaO80zg8i9ssNEqQTU3GkDj2qhz8LlIJbd8xgpvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893787e0a0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":847757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 480, 8-bit/color RGBA, non-interlaced","md5":"1763378f1070dc1559feec244c243f86","sha1":"31993ed3f73cf0b653e28b2f70b3092e63329b81","sha256":"b30f07705ee0d7395fde8da74e9af66bfd9724f32cd1098bfe4631f1df6210d1","sha512":"8b37fc117ccee0abc1095a9377b1296be798dcec087392f759825848c3b2a9d0825284e40a2371e2b2d105496ff57d677428752a8d2cd37f2e36fa72f4c2fd85","ssdeep":"24576:ADt5JiizvQCbhb/qimAM2Or3J/EQrRHhxOI:AZLzI+b/qizMBrzHb","tlshash":"2405239ec59675df01c52140eaf3cfa0991ee245a2e801c1ff8dd84b65839cb2e635b7","first_seen":"2026-05-16T04:26:55.438121Z","last_seen":"2026-05-29T21:29:14.584022Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":1490,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.19.5","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.19.5 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"3f6d-69b5089b-f4aa0;br\"\r\nlast-modified: Sat, 14 Mar 2026 07:04:59 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4686\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMUhZ%2Fpbhfq5WAL97Gw84zvkDDLMMgvmiqwq9E8rkMaGCNQ%2FFXrx6pThdBQ%2FXNKAY1lHQ6LCVQ2qSG1wqlRXjtlB4izrsGVjW8qQ4EzoR6JYYx4cZjF7P9qrOW6EzVZ9KGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a03893788e0e0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13072)","md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-05-29T23:31:08.712483Z","times_seen":12036,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:22:32 GMT\r\nexpires: Wed, 26 May 2027 18:22:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270223\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-05-30T01:58:57.796142Z","times_seen":168079,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":78,"dns":4,"connect":22,"send":0,"wait":24,"receive":5,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:21:48 GMT\r\nexpires: Wed, 26 May 2027 18:21:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270267\r\nlast-modified: Wed, 18 Feb 2026 19:51:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14340,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14340, version 1.0","md5":"3860f0d8108ecb52fb8d95248475c0f7","sha1":"ea12964a22c83d28a3afb1c29ad45ee75e7e2d52","sha256":"0b60bbe04e9c479444b31270a72179f53e400beee57b7dd176c08e5e2e716831","sha512":"51efa4c2f86eed9958227d7a87fb08eb795cd478e4889e63cf40ebcc1f199990fdaf79b64310d4698f1459eb913965b399833a9bac7b62fac78eefe9a3711703","ssdeep":"384:4V1aTNugYTIPM493neccqcvNCfsM+Qzvimq:4V1aT1+IP3nGOfsMwf","tlshash":"5852d0b6a2acc754f41af5b4b180abb8048b2302c591f1e95b18dc795a53534cfbcb46","first_seen":"2026-02-20T00:45:13.010169Z","last_seen":"2026-05-30T01:07:35.828366Z","times_seen":2688,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":87,"dns":4,"connect":27,"send":0,"wait":8,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/xo-so-3-mien-thong-tin-chi-tiet-va-co-hoi-trung-lon.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/xo-so-3-mien-thong-tin-chi-tiet-va-co-hoi-trung-lon.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"154f4-69b5089c-71b4e;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87284\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0lE%2FXQvGD39U%2Fkt8VzZi0OsUy3Vk%2BoaS6PK0phJCW5Pw8OZpP0RWyItvyfSkOibI31M%2FVZ%2F6GhuiUPGbWSDDNAvqplovaKxa3V1lkl3SFQfDvMwCiK7geBwdY61m5ipGqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ebf1b0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87284,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d1bea086823732bb39643dece0e1d4bb","sha1":"4b26816461458fed3faaac2accf74492efd28194","sha256":"f9c8ed19af91f7bb84a72c6f4bbd846a3cfd8d14d345acad6d487182dceef6cc","sha512":"5c64b042e396c2a01425b8c77d52a38f2dc34e495159ce00fdff836163c098a1624b111d75e2af1938e27ad227663f0b9a308034a85377c809e9e506eec64767","ssdeep":"1536:5B4AFQBQzDNR3xvdU+26AbN6qtwZ0eN/iK0HEDSXJFLcAWqxWWJrCYXXQac:5+A6i/3BvdUH634wSeN9dDEYYDrCmXnc","tlshash":"db8312f73ee44650a3026c041e3d360be3c3ec69b504de53a5c1e61da73a548899aceb","first_seen":"2026-05-16T04:26:55.459273Z","last_seen":"2026-05-29T21:29:14.594132Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":732,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:19.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"OPTIONS /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-session-token\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 29 May 2026 21:26:20 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Session-Token\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmJWfLoXBkOshCZ4y%2BNiRUcKFMlmsmPC8z9cXvDNMGGrIchPmSr7vTpiu5SeXxQmMDPOvPvNq7fPaCQVRS1GfHZ8X%2Bo7y1iPcxpoqosXQ31%2BbKNMWyGbcOcbMIbQ%2F8vA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893a39b8635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"3509-6482bd64-1153b4;br\"\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4679\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HH5PUvjteIAQbXRomkWBXqUq6JKIIYlWes2XF1UcDK9yDBHWpPbgL7BFTT4%2BLE%2FxrIiyvp38373knRqiSPsgVYAJ5wezrrK1fFu8i9jKLEBt04Rb9GnvBRwO%2BITcfOVMtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a03893787e080b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-30T01:58:39.08205Z","times_seen":805760,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api_seo_traffic68.js","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"GET /api_seo_traffic68.js HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, no-store, no-cache\r\nlast-modified: Mon, 25 May 2026 01:15:34 GMT\r\netag: W/\"4ed84-19e5cb39793\"\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgBofMa97Mvgw8NAaJVNv%2FrALEK9YRrdN4Wv2Ozk49QQIsogjkHl5R1QwJJpuTozWO4JdZNNRVmMCxHwPEuIdXcUdoDjgX5HKQriJ4d%2Bw1gqifmnsdt8pznMxmMoa%2BB0\"}]}\r\ncf-ray: a0389378b85c5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":322948,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"539f4275f3a6fd96938eb903a8b31bd6","sha1":"c23c2c9cc91afb75b35eb339376ff1dca984afb3","sha256":"02b2c96bb9ee3e90b6e56721eb3c4c2c2ed077ba49778d87b00f5927866ae848","sha512":"89fc7949ff2f123aabe9cc1dda8c39fc013a1e2a5499002f1754b1f60f9019c2215e56e78c37d9d8807322e9a2d8041c85e637fb72ed3226e91eaaf4732a486c","ssdeep":"6144:tH9ynwVMRCynNQbtMlSFrPnAQW0s/v6JM5wHXeyXvh9Jj:XMRCynMFrPo0s/v6JM5wHXeyX59Jj","tlshash":"37644e122af07c4623836fb73b1bb5d5ed1a29aab4448c6bd305bc50b2f4532e6d1e71","first_seen":"2026-05-28T07:05:12.967566Z","last_seen":"2026-05-29T21:29:14.591026Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":24,"dns":18,"connect":1,"send":0,"wait":961,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"58ea-690e05d2-d991f;br\"\r\nlast-modified: Fri, 07 Nov 2025 14:44:34 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4912\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCj8CdlrKhRun9xT%2F4R81%2BdStbsgqhbeo8kc4z2QO3wpzWt%2B%2FM%2Fez5wXTuh%2BtKcmQ82MOzSgj3aOsqQTNHaNv3BfE4O4pwGzKV%2BB91MXKaMS1YREgmpez%2BrnFR9gp7FFyJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a038938e3f170b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-30T01:57:35.806747Z","times_seen":248790,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cach-choi-poker-32win-nam-luat-nang-cao-co-hoi-thang.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cach-choi-poker-32win-nam-luat-nang-cao-co-hoi-thang.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"12612-69b5089c-70797;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75282\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Injn6NhGqmshhYtmZm6C6eiXZlgF%2Bd1G4Ghc2ospP%2FpGjd%2FFwHp%2BpxAV6URqVbjPN1ocqvV6BqxgO6AveYadv6B%2Fxh0lvadlciIvSJENjKo8PRcLlFjG2hs73jtdV3NZ9i0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ecf1f0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28fde52979422745334f2138ef6a862d","sha1":"3bada3034f46c3cb08cb5f2ea83de2ae1a3e304a","sha256":"ec728113da49930fb9054d32afd8fbc1237ff0a6f05dad3df57fd1a19638d72b","sha512":"81f4a9a1691db0b41370e0916e77b562586060a656ea083fa4831d3efd7d6b9d0ec7a02890d365df49bd1dd96d38477edc254990ea9be617ed146a40ccf0cea7","ssdeep":"1536:4gaQyvbS7cVZiIGnZIqirVFIIRC0zO0C2RxhEM1l73u2:DaQyG7UZJGZIjLIOC0VpTz3X","tlshash":"a573026f1b14f2a87316ad1d607a1ea238c90a70d71ccd2d96f41def652484583abf2f","first_seen":"2026-05-16T04:26:55.471047Z","last_seen":"2026-05-29T21:29:14.595884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cropped-favicon-32win-192x192.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:18.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-favicon-32win-192x192.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:19 GMT\r\netag: \"2268-69b5089c-70812;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 8808\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:18 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fxy3Oed9l1ehSO7QYJcb8EvppEz%2BX%2BzWgH1z7pByQwMiacKsxNRJzDXRLy4LA3lU%2BS8%2FN3nYabiLmWS2P5dnW6hOiSIL1kGhFRL1%2FAJLxhnNKV81Z0Gxf85tFP8gOHboex8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a038939b4f750b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6de3748c02eaaeb18f554272b6be751e","sha1":"6221a69f67072ec1131a1e4af1b65d95cc2d6758","sha256":"9cb3bcf6d113dbcb3ffff0996e9c8383c083df128f0c603b922087742a9b4ee9","sha512":"3aecb7438c9b375d1723fca6d6adadbc1b65252e9382631128f69ac2e3b96d48a80a4ab29d18d470fc02be9d93847af493dac7928e85e180c91f447c0c29a568","ssdeep":"192:Zmmmmm5Fz9OhVyil6pxVsw0F7tdyyh618ADePG1cYARN3f8WkQmmmmmwmB:qOhVyiEpTR0FJdyyh618UIQgNv/kV","tlshash":"fe029d8fa076cb35330ac36120d68cd564790fe441c438b7cae51542797aea0a94fffa","first_seen":"2026-05-16T04:26:55.480818Z","last_seen":"2026-05-29T21:29:14.587031Z","times_seen":4,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:30.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"POST /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nContent-Type: application/json\r\nX-Session-Token: 1780089975.8e70fcdd27dc8822\r\nContent-Length: 258\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"visitorId\":\"63ac8034ab95040ac97defbcb304e392bae69a54a2b5b560470f43190b9ee5dd\",\"_ref\":\"\",\"_np\":{\"navType\":\"navigate\",\"hasGoogleParams\":false,\"googleParams\":{},\"pageUrl\":\"https://32win-32win.com/\",\"hasCfClearance\":false},\"pageUrl\":\"https://32win-32win.com/\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 21:26:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"d-YHISmnPiR6kucVONsyHT73c1TKU\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79hEslvaSJzEFpJ0U8A9t%2FcfEjIoaXTXhdfJ5nt8%2FzZimoum%2Byw4QE9p79LlaAnQpPkEpCSGbm4eR0R0VWiYiqzi%2BpLO0mBO3%2FJnMBqClk2%2FFw%2BOLx7fcEnD3dKn9dSl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a03893e6bab635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b15c059c3bc397b2b9378d6f9b2af96e","sha1":"6072129a73e247a92e71538db321d3ef77354ca5","sha256":"843b78571dee3c34ed39faa49bec28157fc2687027f5775ad51a7055b662feb4","sha512":"523cd191081db4c2dba20cb5fae4de27b63ab22347d4983bb6e09aee4b42c39ae813a09837297bf2d371c482d5cffe15bb6f82b7f436b737472046583f674d3b","ssdeep":"","tlshash":"b36000000000cc0c0000030cf3000300000000c03c0030c0f000000030c30c000c0000","first_seen":"2026-04-28T05:43:27.505871Z","last_seen":"2026-05-29T21:29:14.569234Z","times_seen":20,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cta-img-3.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cta-img-3.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"3ccb0-69b5089c-7083d;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 249008\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYXJ000oZe%2ByTVQNWN9wZopL%2BbgXMPRDVOoSoV6UUneO6HIYWStpJI09ERcW246ni7wnQuLzNl4ckISkxCp%2BHlve%2FqbiwCJ0%2BejQEfQbrfDCjYOrq1VZN%2FIG8HmN4zu5Yl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938dcf140b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":249008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 847 x 322, 8-bit/color RGBA, non-interlaced","md5":"655f1dac56860991b345e1ddf8b05ff1","sha1":"b11ecd6aff4b34e6fa15ebc7531903712fd09cfc","sha256":"06c57d92826dbe0efd592431f1836c99467ebe7ad5d72c2777e1ee2fcb7c62c8","sha512":"15702a2d117a0ab457234d7dea505499422a4c8a5a182543393069e924b9c72643d4c83dcff7a9965ad5f20e94ea48c17aff50ea6be6dcdb4ed11db484098770","ssdeep":"6144:5gBfCNXURQJDiN6ifIwdHFvkmfBASjmuQMhdQuKOzsn7ZY:1XkN/paSjBlhnKqUC","tlshash":"7d3423a9e84215d11117b1436fe20e1d4a33315952b7a3aaf25e8ef40c0f609f7d6fba","first_seen":"2026-05-16T04:26:55.447408Z","last_seen":"2026-05-29T21:29:14.595239Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":992,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep.js","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://traffic68.com/creep-frame.html","date":"2026-05-29T21:26:17.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"GET /creep.js HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://traffic68.com/creep-frame.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 21:26:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 01:15:30 GMT\r\nvary: Accept-Encoding\r\netag: \"6a13a2b2-864e2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33eb0UsICORYQvFbWSoiETYNKEBmHXBz%2BFEqs94kRJlUz2HQMA0iPTKuvOIun42CHHGvdDBpp5NAgMjMqwNXfUae3HDuH62m8JWCkns%2Bx24xKor4wZVesqPy2ETX7kPO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0389397aa1c56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (434)","md5":"534e328cfe5a97f214fc8aecc23ef8a4","sha1":"f94f2d24f8deae25c40f4882220d474f59f9d2fa","sha256":"9679d2b616e10a5a7070d0bfe6064fa62ec914763ebf0b514c0abfc59cb97e39","sha512":"bb86e2026e554251d86fd37675b920aee0c36cec1a2acb79815d3fe101adba4036fdbeb01dd03343f627eb8c4e0b986f3fcb76159aeb2d16ed6a8fd677ca0a94","ssdeep":"6144:o0V1GlKTua0eQbFy1nXBI+OJYyETxTgBTvTBdV22ms26mo2mhF22v2/VhC2WmHh2:oG1KWunyLnKGgBmEatgyU","tlshash":"44c4083a65332024045742af776f9609b63850537c09f8e4ba6d87042fdea1cd6f6fea","first_seen":"2026-04-08T13:34:53.338709Z","last_seen":"2026-05-29T21:29:14.585907Z","times_seen":23,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":759,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cropped-favicon-32win-32x32.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:18.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-favicon-32win-32x32.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:19 GMT\r\netag: \"399-69b5089c-70818;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 921\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:18 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kds5N0R%2F%2F0tbvpHYNNJ%2BHbqRTCocDs36tCmukB8i2YXdiM1s6CoyyT%2FgWHzkSuFkJZj9zd7pEN2h6RPkTF2kbgMTRxlQlUoAI4JMVhMPmHi4j23v0VlsigRDZO7GxhbkeGM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a038939b4f760b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"7b0b3f737f72bec09f5db8ec69cd270e","sha1":"95031f0009b5f21854a00b5b1eda5d40ea5da942","sha256":"119fb23089e2518b5369d4a02a41078a84334aabc732b9221afd17cb5f2abc32","sha512":"bb7b85410563179b419bf8159702bcc04c8d1c7aa0218c362d6701fd9db5daab4efc198aa32026afd3ea2da8dfe082024577618f3b06e84f847a0d17466644c6","ssdeep":"","tlshash":"7511bbdafb42dc79c985c1f9a8a44459ecf7d327194f62501a39c918067837f90ecbc4","first_seen":"2026-05-16T04:26:55.452116Z","last_seen":"2026-05-29T21:29:14.580399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:22.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"POST /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nContent-Type: application/json\r\nX-Session-Token: 1780089975.8e70fcdd27dc8822\r\nContent-Length: 258\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"visitorId\":\"63ac8034ab95040ac97defbcb304e392bae69a54a2b5b560470f43190b9ee5dd\",\"_ref\":\"\",\"_np\":{\"navType\":\"navigate\",\"hasGoogleParams\":false,\"googleParams\":{},\"pageUrl\":\"https://32win-32win.com/\",\"hasCfClearance\":false},\"pageUrl\":\"https://32win-32win.com/\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 21:26:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"d-YHISmnPiR6kucVONsyHT73c1TKU\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oh6WpSPn%2FJ28jFWCH%2FyCIXoNQdZr%2FvoaXLUwIJQyKQRaMYuByDGdkrgX9nGvFc1jErWJPBYKRge7hNRLgO%2FRB%2FFvrN8bWiiwT1LZNfzpQe4NYfhet6ohwn9zNi4YHVN8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a03893b4bdf835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b15c059c3bc397b2b9378d6f9b2af96e","sha1":"6072129a73e247a92e71538db321d3ef77354ca5","sha256":"843b78571dee3c34ed39faa49bec28157fc2687027f5775ad51a7055b662feb4","sha512":"523cd191081db4c2dba20cb5fae4de27b63ab22347d4983bb6e09aee4b42c39ae813a09837297bf2d371c482d5cffe15bb6f82b7f436b737472046583f674d3b","ssdeep":"","tlshash":"b36000000000cc0c0000030cf3000300000000c03c0030c0f000000030c30c000c0000","first_seen":"2026-04-28T05:43:27.505871Z","last_seen":"2026-05-29T21:29:14.569234Z","times_seen":20,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:29.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"OPTIONS /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-session-token\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 29 May 2026 21:26:30 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Session-Token\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZZhQJPBXLpSOU8Yy6MrTU3zQWXIKIH1H4iDMizVF8jd7MD2f61po6n8jGQKD6QirwSPjUFSLvFdSN8l77vL6r%2FZcfMqjqTlIFmVENAYWOPjoOtFMWpcMTBLX3f5CB%2B5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893e52d7135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"5db-67a4f0fe-d98ef;br\"\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 669\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKDFNfbcQTOwvhcP5ycf9Y1co2aE3A%2Bn4NxQWIQKB6lFxcCqmoeQcqhyHGCZx5apyXc%2B1g%2BekRWKTOng00WdJIsMlXzPbF9tQoNCPqHP74qAltDpYMxm%2BbyHVcQDvlMr4Ns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a03893788e0f0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-05-30T01:57:35.791877Z","times_seen":76688,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:regular,700,regular,700,regular\u0026display=swap\u0026ver=3.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Roboto:regular,700,regular,700,regular\u0026display=swap\u0026ver=3.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 21:26:12 GMT\r\ndate: Fri, 29 May 2026 21:26:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"261808772a38bee61a32aa80be774008","sha1":"7fef323fd8fdbb99eb6ebfd2678c73afc7e7e83b","sha256":"02277c4df3590949344a542c33081bb91aef4d64b4d68684d6679c8aa59eccf2","sha512":"e0a343fc046cfde2b059e823bb41566f1cf929b809bbc527fa2d9e33c613edd58802da4e2c4e5d8b601e1be2027ed32e34ed413671a8aa5a51bce84142f5002e","ssdeep":"192:2N9fmN9fN94N9fkN9/qbN9DbqGIwV4BN9nN9uwN9iN9fXN9uN9NN9fZN9/qqN9DK:89fM919W969yh9/qY4X9N9t949fd9k9E","tlshash":"a3321fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T22:49:36.283016Z","last_seen":"2026-05-30T01:38:22.819927Z","times_seen":4273,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":70,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=8e60d746741250b4dd4e","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=8e60d746741250b4dd4e HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"ce7b-69b5089b-d17db;br\"\r\nlast-modified: Sat, 14 Mar 2026 07:04:59 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15900\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRNW%2FnreyyVCtu2l28PlNC1UHUImyukTC4D%2BfzWXQ8AdSDckIV%2FEzJwlidKttbpFv5c%2BlR9tOBcdFNIAqQMmupvL1US8813SzSBrtFFz0SvU96VnkkhnrOKxNwN3cmCyZyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a03893788e100b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":52859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52859), with no line terminators","md5":"e4255cbc3ddf1c27dacbd4860b3782c3","sha1":"fa17cf43be7ad4814efc774f8f9d8a6a9a5c8221","sha256":"10d17b852c0a0ab3de4638a2b0fcaee7ed4632a04fb126d388e871bffd0d0854","sha512":"e1dd1119f545c4c2ff24eb34ea1c0ec902abfab92b35abfe75a382ab7af5c065b88ad021b7a0d57ca31a839588e1fa4d485bfd3c59011c34d0057ac94b66cfbb","ssdeep":"1536:IfDJqH5NQ8kNSqcp1U8EtmoYrNqK7kSBed3ZRm:MoxjUvkesedy","tlshash":"1133e728729070fd01ff61a7f13fa32432376565b0064054b53d98fa2d6ad5e26a3fba","first_seen":"2024-07-13T11:25:57Z","last_seen":"2026-05-29T23:31:08.683438Z","times_seen":4409,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.19.5","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.19.5 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"1d88-69b5089b-d175e;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:04:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7560\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:18 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGkGV%2BmY%2B8sBHtYAh0aaWiWPPr%2B2m2tSas%2BhBF07HeZeC80IHM4K9rO8qCbCL28OaVVNNwL4oi8HFlkwlpz0MjFfs9RB7xuRp%2BBTmJ3jpsFGyu8fo2yNU3oRIvNUYY5tal8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938c0f070b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7560,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7560, version 1.0","md5":"7db70d75ed20d444c694d6aad85ce18b","sha1":"01d64f5ed7777e34c148c83595b877d0f6272d4b","sha256":"3c5b7d55b56f4bdee9e362078497694a9605b716868eb907b7e9c39bc5b5b9cc","sha512":"ad05e1701fe81d050b8db6574c28d9ce9c12242fb4cf4d6d4c5746829574ac2b38029cccb255d21c4b0c2d60d73854894c5043245c3ccd733017b60d1ff361a4","ssdeep":"192:mdZdmp7xgnbaRx9fo1JQrUo2Vfah48R+Q/BE99D5q7PKJ4:+ZYpsbaRxphAYhbRD/BE99Ep","tlshash":"faf1afddfd527b7bd2d1d126394007c838cad44919901cc2aaaf2f2933a3c569db27ad","first_seen":"2024-06-20T14:33:16Z","last_seen":"2026-05-30T01:57:35.787642Z","times_seen":19668,"resource_available":true,"data":null}},"time_used":2637,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2636,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/creep-frame.html","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"GET /creep-frame.html HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 21:26:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 01:15:30 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksmmZwur00gqmqj%2B82%2BcnbyEB8Gi2ZDGzCLIa89vncR8dUPnNMiaMByQsCf2WtZ472riIrxyErei243siyO5tP6vPjtCQfNbJGulgDxaLMeL0voVwdPWsKjiX4pcd6nn\"}]}\r\ncontent-encoding: br\r\ncf-ray: a0389392ad3356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9562,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"469fdbe195dee0098b5bbab534bd9908","sha1":"818782887fc09ed1f88f20978e4436af6bf530f2","sha256":"a051453aac5bab0f469a0ed1864ba1d3b6592c331f3ba4bf9b7d726c0f15d5ed","sha512":"de7290769f582f1ed44df208b31b2f9114c682f0452f32c434a829e09ca2de1f2622f7d704698cdee5706cfbf6f14623fe5907ce5ec17fce9bab3a98c0f09b5a","ssdeep":"192:S8gGRTm0kwiSCzdbV4nz/UDYPX5ShdBkAV/eIO0LDTySDH+tdaTQxwbM:xnXSr+yeeM","tlshash":"0612428d1cf3311695a3342e4fef500eb661b993014eec20f94dc7141fa09a5aba9bda","first_seen":"2026-04-25T19:21:54.410833Z","last_seen":"2026-05-29T21:29:14.596719Z","times_seen":21,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:24.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"POST /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nContent-Type: application/json\r\nX-Session-Token: 1780089975.8e70fcdd27dc8822\r\nContent-Length: 258\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"visitorId\":\"63ac8034ab95040ac97defbcb304e392bae69a54a2b5b560470f43190b9ee5dd\",\"_ref\":\"\",\"_np\":{\"navType\":\"navigate\",\"hasGoogleParams\":false,\"googleParams\":{},\"pageUrl\":\"https://32win-32win.com/\",\"hasCfClearance\":false},\"pageUrl\":\"https://32win-32win.com/\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 21:26:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"d-YHISmnPiR6kucVONsyHT73c1TKU\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PHwlgRb8QW3dJ5cHDujhS4CfrW4TmX%2FnTuNdxgiFGYqCP8n14PyfVtXzKptdvYWKE9BvgM%2FW%2FeQERPnWb5stJlNZW1qFJSelqg47aZci0SCL9D1FJvGzXfL4b48hSGw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a03893c13d4635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b15c059c3bc397b2b9378d6f9b2af96e","sha1":"6072129a73e247a92e71538db321d3ef77354ca5","sha256":"843b78571dee3c34ed39faa49bec28157fc2687027f5775ad51a7055b662feb4","sha512":"523cd191081db4c2dba20cb5fae4de27b63ab22347d4983bb6e09aee4b42c39ae813a09837297bf2d371c482d5cffe15bb6f82b7f436b737472046583f674d3b","ssdeep":"","tlshash":"b36000000000cc0c0000030cf3000300000000c03c0030c0f000000030c30c000c0000","first_seen":"2026-04-28T05:43:27.505871Z","last_seen":"2026-05-29T21:29:14.569234Z","times_seen":20,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:27.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"OPTIONS /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-session-token\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 29 May 2026 21:26:28 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Session-Token\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiB1PMHI9XtBkyWYd%2FN5AnyhJsi8PaFTLSW%2F%2BvWDvxlkAyLE7GM288igIJGxLrBeAAENEmgdvRG%2BzE4gfdzY1mjpYSdTiLZW9wAH3LZg0o63ogCF3KeNW4Z7bpr1VYOb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893d8af0d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/logo-32win.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/logo-32win.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:14 GMT\r\netag: \"98f4-69b5089c-711b7;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 39156\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMFj2Cy08lyuQOmpaeH%2FUgZpjpCdNYPXqql9gp%2FjvEh8ZbyEgm3GPZfMqJOgkwXShyAnGyhSmBFDTq13ncJdmR2xdsATz19Z9KWnde7oCIABcUDlFfc6cBPkv7X28IMPTGE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893787e090b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":39156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 207, 8-bit/color RGBA, non-interlaced","md5":"063b52ac039ea05b13273e26e1dad0a1","sha1":"b6665376c0d3d076e75b006496130e48a9a6bae7","sha256":"3ec4665914ec60d45adc1ea8bee79b575494fa0daa3038690fb4c0565c7b630f","sha512":"5ca63db6f243ed3294a4f8af37118054e2d9be48d297201228a6e8f7cc577b7d82baf0084689282a10a7b9d81b99c323467e105073b8d9bb07561f1d2a6270ba","ssdeep":"768:vVvPqNSacIdVSMmoa0ZTbW7OmuI6cONEptEd2FMjowkS1CODWRdm3vNP:vVvPNacIv5a6W7OmuIaEptEI4sSxDWRs","tlshash":"9503f15e64e344906b11e42edf1bb66198331ed928f0580cee1c99971b930b72bde1ca","first_seen":"2026-05-16T04:26:55.486342Z","last_seen":"2026-05-29T21:29:14.591644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:22:32 GMT\r\nexpires: Wed, 26 May 2027 18:22:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270223\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-05-30T01:58:57.796142Z","times_seen":168079,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":81,"dns":0,"connect":8,"send":0,"wait":10,"receive":12,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:13:50 GMT\r\nexpires: Wed, 26 May 2027 18:13:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270745\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-05-30T01:28:02.763639Z","times_seen":9068,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":74,"dns":1,"connect":24,"send":0,"wait":24,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cach-choi-bai-lieng-32win-hieu-luat-lam-chu-van-bai.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cach-choi-bai-lieng-32win-hieu-luat-lam-chu-van-bai.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"12514-69b5089c-70790;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75028\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8laDi%2FZgEmE5DNvHrKYK3Ji%2BDeq1PQ7nJmRjaaPfzRthkOXGGVI6S%2BKLJYhhPNTbTZsLvZ%2FGaqAbhs2yFx%2BVWXJMoV57oRTJIDlVVLOdlXAN1S%2FQNQeX4izrJzFlqIkahk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ecf1d0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":75028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a499edfa925200e6bd41d4dc86e620d2","sha1":"cbeeb1d260e0e23130b24826d18201225c33b2d7","sha256":"2f344a660c4049801df106c1f477885275bfe836ed58d9c4f9bcd6394a5ed761","sha512":"08455762e6d366b2aeb1a092b07a616fc2fa00020dde24ae1dd0b9f66367da4b24b547e87d046ce9bb26e360a1b7e2bad6a8782b6371944f7ccc5897dc9a69e8","ssdeep":"1536:KmEQC7wNG1emIYJiEMtBQfcv8TERBJvUdx2m8tuaxgQGsi:qe8emPiEMtBQfKkERGcmsuaxpli","tlshash":"b5731215292c429c8d4231ce37676be09075676ee459e0ff586fb5b49f08ac870c6be2","first_seen":"2026-05-16T04:26:55.477425Z","last_seen":"2026-05-29T21:29:14.577178Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:21.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"OPTIONS /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-session-token\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 29 May 2026 21:26:22 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Session-Token\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaFXIlHa1a%2BoMYHhruNlteKTQqDaAquHN59A2zY9ZvV%2BdOnA6yaJVeOfnQjI4dKi8kQnHUkUlsE6%2FDLstme5PjdJi1ATK09qVjmrbgRj01IT%2BddM%2BxNpcmfmIfn31Vib\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893b329ae35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9/check-session","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:28.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"POST /api/widgets/public/T68-B01E71E55BA9/check-session HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nContent-Type: application/json\r\nX-Session-Token: 1780089975.8e70fcdd27dc8822\r\nContent-Length: 258\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"visitorId\":\"63ac8034ab95040ac97defbcb304e392bae69a54a2b5b560470f43190b9ee5dd\",\"_ref\":\"\",\"_np\":{\"navType\":\"navigate\",\"hasGoogleParams\":false,\"googleParams\":{},\"pageUrl\":\"https://32win-32win.com/\",\"hasCfClearance\":false},\"pageUrl\":\"https://32win-32win.com/\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 21:26:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"d-YHISmnPiR6kucVONsyHT73c1TKU\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gxUFFoVTHUQXsOctJq%2Ftrm4I23fO3MSeuWhnK3KkRhKR%2FAMirVgpRkAt4gjX4P2%2B4VyQM%2Fo5JeqCopA0XfGA0ljnDhdEM192sRO2MhNZqKjZjwZv9ahePkqdREaDw%2FA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a03893da3b8535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b15c059c3bc397b2b9378d6f9b2af96e","sha1":"6072129a73e247a92e71538db321d3ef77354ca5","sha256":"843b78571dee3c34ed39faa49bec28157fc2687027f5775ad51a7055b662feb4","sha512":"523cd191081db4c2dba20cb5fae4de27b63ab22347d4983bb6e09aee4b42c39ae813a09837297bf2d371c482d5cffe15bb6f82b7f436b737472046583f674d3b","ssdeep":"","tlshash":"b36000000000cc0c0000030cf3000300000000c03c0030c0f000000030c30c000c0000","first_seen":"2026-04-28T05:43:27.505871Z","last_seen":"2026-05-29T21:29:14.569234Z","times_seen":20,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.19.5","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.19.5 HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:14 GMT\r\netag: \"251fc-69b5089b-d174e;br\"\r\nlast-modified: Sat, 14 Mar 2026 07:04:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 28022\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RhfgTVayRaVk7S8w9rwJnop1rxOK2dDRXvyOIu7UiDJkqxwJHGxW%2FiqEpvnX3P2O1OzUipngR9Py2KJD9zykp0C1qAIWrcMlH9urKD00nEx%2BrcmGjj638oJh0%2FGPfhW9Gk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a03893787e050b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df78036a530d25d47f4c3cae36a0e62a","sha1":"310d1540d0dc1498fea575af3b914a4c97b622bc","sha256":"18c56efbd596fc0d574d5ae9839c9f48c7eb826024fbcfb960e0036baa9fb32b","sha512":"5b8d1d634074a4b12f8b29aed7acebc7c39d875adf74926fd5ce867bc6055f3d1b110ea4abd956ebfd80f21bb25840d52cd4aafe2230997ff5b6f2159c0b37bf","ssdeep":"3072:Xq5/32yTXYK8Jm1LqCYDmSx9JNp30dOeLWo0EADT+1zeckhNV5h:MSx9JNp30dOeLWo0EADT+1zeckhNV5h","tlshash":"74e32c52f384242ca5178319e5c4fbbc763991a1e7624afbf0639629cbcb6da0135f0d","first_seen":"2024-08-28T18:27:34Z","last_seen":"2026-05-29T21:29:14.587675Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cta-img-1.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cta-img-1.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:14 GMT\r\netag: \"4449b-69b5089c-7082c;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 279707\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GesYr75nkwjX1dJLzzRAamQP19M0nOcHPqOeHgfCW3fSpDlKlsshSTDA0cFkIq4nbbreTXGs1V0YSkxpEVnyg%2BpbEEg%2BZp8Q22e%2F4J7thSWAUNtDa3%2FX%2BLNmstW5TwYhVL4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893788e0b0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":279707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 858 x 356, 8-bit/color RGBA, non-interlaced","md5":"3b09e8ee1491dfed8b6a185fc8d5605b","sha1":"e5b77f87516dcad5a7174f82a3c324a3ea6b9ccf","sha256":"8083c1d164a5ec2620f889f1a4cbc50606036d0126f02f609d0d71a60fed8c75","sha512":"ceca5e44c0124363c976f3c2ea7300c15bfa7a1b0cc804c2cc416492732177e28509bb3e5f21a17c9ed861733f576351863d6665263bd0c2ddd90f204c390c3d","ssdeep":"6144:b+nZCofHKjOPYOqQ4OA5zZC1zLnyuXdF6iD:KIZOPYfQ49lC1z+OZD","tlshash":"d75423760aaa2858cca473ffb73cc274bdb5681346706c1bf740181896f5e607d3daa6","first_seen":"2026-05-16T04:26:55.444049Z","last_seen":"2026-05-29T21:29:14.566907Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":1043,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2025/12/cta-img-2.png","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cta-img-2.png HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:14 GMT\r\netag: \"4a126-69b5089c-70832;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 303398\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xePgq7MSLktrP7MHgefqGnV4UJKcEJNouIIay3muxsWMITPoIwEmOiLBVZ5LZQ%2FtYNf4jCNycFI%2FBJtKZO2o5tSWWCfaB6vlc5paEp2sIMvOqdmS4FbF4T4jHNkll78a1AA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a03893788e0c0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":303398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 896 x 318, 8-bit/color RGBA, non-interlaced","md5":"558066b2a3cd55c5630993e7415e772a","sha1":"7a9c06c22797a5d54f336e4e4fa7b197560fd58e","sha256":"80befbff88be616de0023dd098a729d183ecd18fde7cd0e21400f6ded11f3e0b","sha512":"0bdda366a51630d149f5a9d79afa5d5a1fa920bc9cc7c049f7bf5082452cafafba169336579d562c9d0086bc640a7d4831757b2c13fab05ad5e64a70569d96b9","ssdeep":"6144:/H7YE6IOKNFaYRORl24ReCPEz+P7eHFGZ9MwUtK0d3Hz1A:/z6IHajI3+ClYewUtH3T6","tlshash":"bb5423231ffabe7845f9aa34e25f16a4349cd94ec77774c830a6f84c994a05992423f3","first_seen":"2026-05-16T04:26:55.488183Z","last_seen":"2026-05-29T21:29:14.588767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":1076,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:21:48 GMT\r\nexpires: Wed, 26 May 2027 18:21:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270267\r\nlast-modified: Wed, 18 Feb 2026 19:51:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14340,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14340, version 1.0","md5":"3860f0d8108ecb52fb8d95248475c0f7","sha1":"ea12964a22c83d28a3afb1c29ad45ee75e7e2d52","sha256":"0b60bbe04e9c479444b31270a72179f53e400beee57b7dd176c08e5e2e716831","sha512":"51efa4c2f86eed9958227d7a87fb08eb795cd478e4889e63cf40ebcc1f199990fdaf79b64310d4698f1459eb913965b399833a9bac7b62fac78eefe9a3711703","ssdeep":"384:4V1aTNugYTIPM493neccqcvNCfsM+Qzvimq:4V1aT1+IP3nGOfsMwf","tlshash":"5852d0b6a2acc754f41af5b4b180abb8048b2302c591f1e95b18dc795a53534cfbcb46","first_seen":"2026-02-20T00:45:13.010169Z","last_seen":"2026-05-30T01:07:35.828366Z","times_seen":2688,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":74,"dns":1,"connect":21,"send":0,"wait":29,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"traffic68.com/api/widgets/public/T68-B01E71E55BA9?pageUrl=https%3A%2F%2F32win-32win.com%2F","fqdn":"traffic68.com","domain":"traffic68.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traffic68.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 08:58:41 GMT","end":"Fri, 07 Aug 2026 08:58:40 GMT"},"fingerprint":{"sha1":"08:EF:12:15:11:3E:34:47:CC:4F:9D:4B:1D:43:54:D0:8E:FF:06:67","sha256":"B4:E6:69:3A:93:60:C9:C4:C5:42:61:98:EA:9C:3F:0C:7D:FD:98:74:47:B4:9B:3E:1C:1B:7D:57:D3:F9:60:71"}}},"request":{"raw":"GET /api/widgets/public/T68-B01E71E55BA9?pageUrl=https%3A%2F%2F32win-32win.com%2F HTTP/1.1\r\nHost: traffic68.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://32win-32win.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, private, no-store, no-cache\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"89-d7aNXFyBABYvNJaUCPhLKeHxN9o\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGC2Puxsfj0Hhgf32ycx4VGhFdBctcdmz4CIQexBCPuM2RkoiVDbu%2FgGZSptTbwo8FRzP6AWs%2BQB5iNbaAoPvQbBc%2Fc34mKjXGvBD9ylOMc3ZRBfFOMcO7zQmYIRYeMR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a038938de81335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":137,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"320c8c8e3a596ad0b82a2c1387a28aee","sha1":"77b68d5c5c8100162f34969408f84b29e1f137da","sha256":"0772fd27ad9984be167f39d481647c67c1c111f83f30e2b796b510e9142af667","sha512":"85acf1c5e572fca4fb7303c295c7a82f71bfb1d097a3367d0faaa59357958ed2e399f1eef52f89cd64a9d67ff0760d3c16e180b2d484294f9cf58f1341cb19e0","ssdeep":"","tlshash":"c2c09bd61d16423427815c546d17ed6a3c5665b33d506da0d41d9572b3e6857d010447","first_seen":"2026-05-29T21:26:38.759433Z","last_seen":"2026-05-29T21:26:38.759433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":18,"dns":1,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/wp-content/uploads/2026/01/nhan-dinh-keo-tottenham-vs-brentford-2-1-derby-london.webp","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:16.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/nhan-dinh-keo-tottenham-vs-brentford-2-1-derby-london.webp HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=7776000\r\nexpires: Thu, 27 Aug 2026 21:26:17 GMT\r\netag: \"10a1c-69b5089c-71b56;;;\"\r\nlast-modified: Sat, 14 Mar 2026 07:05:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68124\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 21:26:16 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9%2FOyQ5gWyQEQ1tZ7xXuhtGI8eHbDy7jisZL28l%2F%2Bv4OsMSlW0CAnSHMOzT%2B0dUhQRkVyjvqHWBzqDpyygSTJJfcxKEOsggkt0npVhPRg9RicvgR%2FirvKOFCnw8ohJHeE%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a038938ebf1a0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":68124,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4817ce99e3e9469447452153691388ed","sha1":"39a507b135097f5ef9ec81649f558436abcdf473","sha256":"0589cd57afdaf1d3de3aa714e151c09fa362272c3659939fbb808e0c65023592","sha512":"9d8d5f1a29d7cf6ef1ffcf82340ec27c713c43a6af145779ee741a0c8b5616a0581f91a71edf949b99bf145660ef00d7c19ff9e5c48c3785ae5900075bcac74b","ssdeep":"1536:ZibUM5pcOjpj6Upr1EXcQCW+VnoU9yT201Ke0A:Z21GOVjDx8CW+toUw1Ku","tlshash":"b76312e912f5e417c1b1feb0d9262e71ed021e021decbfc91f009f70195826ab77a146","first_seen":"2026-05-16T04:26:55.475614Z","last_seen":"2026-05-29T21:29:14.568701Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":562,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"32win-32win.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"32win-32win.com","domain":"32win-32win.com","tld":"com"},"ip":{"addr":"104.21.41.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:12.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"32win-32win.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:27 GMT","end":"Fri, 14 Aug 2026 06:14:26 GMT"},"fingerprint":{"sha1":"BC:8E:D8:64:72:01:D5:31:48:CF:16:D1:C9:0D:9C:3E:85:9C:86:DA","sha256":"D0:82:4C:FC:98:FE:6A:B9:61:53:E8:DC:AC:04:DC:1C:A7:06:2D:7A:D2:52:CD:19:D1:7A:5E:A5:D4:72:2E:10"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: 32win-32win.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://32win-32win.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 31 May 2026 21:26:12 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJ7Lp1knKJ0Jb0IT35Nk37hdf1aiWRsRjmA6Vyp%2FR5O86WebJd1JLOGmEmKnoTUF6sJqjG7DTkvIjoDp6gCOyIimHj8cfvfTSDf9QahZMrqd%2Fi3R1H5pBGF%2FbN5XFkDvYds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 21:26:12 GMT\r\ncf-ray: a03893788e0d0b59-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-30T01:57:14.368252Z","times_seen":354640,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"32win-32win.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://32win-32win.com/","date":"2026-05-29T21:26:15.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://32win-32win.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:13:50 GMT\r\nexpires: Wed, 26 May 2027 18:13:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270745\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-05-30T01:28:02.763639Z","times_seen":9068,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":73,"dns":5,"connect":21,"send":0,"wait":14,"receive":2,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}