{"report_id":"cf8cad39-7ecb-4c30-8e17-329c2f5fa4d0","version":6,"status":"done","tags":[],"date":"2026-02-01T20:53:30Z","url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"172.67.142.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"title":"Zeroxwin: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling","dom":{"size":342941,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30174)","md5":"017dac533ad14698dfc66d765be62926","sha1":"e7eac511a902cb78721bf7d342f2eaaea4a96030","sha256":"d50541d8f9e536df3ec024993f8b8d9c5da57da5ae0d780492d7ec1854972677","sha512":"eea0430bd06e500fcee393efea551a5bb63abd1d53b00523adef860e3043c979fc9fac940d3e1bad7e87e7061341045434fc97d31a2859b023ab84cc29b1d20c","ssdeep":"3072:TwiJoSM6y74gdsa5okSo/7nTAVmrtWjaD6M/2yT+VvzrhJUo/i2/8GtqO:T9emIQT5","tlshash":"44740829e402da69e4674ded317eaf3a918ed637c673886cf3dcc5a403868798f915c0","dom_hash":"domhash34bcd22c34b7450b61dbb578123ad05c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"172.67.142.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T20:53:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zeroxwin.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2026-01-31T21:17:38.492984Z","last_seen":"2026-01-31T21:17:38.492984Z","alert_count":414,"request_count":207,"received_data":9468418,"sent_data":172698,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b10f9b9006411b6afcb5843e7c57c31d","sha1":"a7731eccb8b59abe9c0743003d304b3453e69938","sha256":"30cd123786f0b612a543aebae24a5dd7ac167190d35ec78e66c949a4ce868f44","sha512":"e5f863b39ab02a5072a1c5087569aac9fd79ead2888c61dd36312cb32910bc428a2aeb691f194bd3444c3ff6c6e146b26689ec519b06c2100864149bcafb8671","ssdeep":"","tlshash":"6ff081f47452f9a7c5a23424013b7f17176f110e75089810d71fd154573aa3b8393a8e","size":573,"data":"","first_seen":"2026-01-31T21:08:57.386599Z","last_seen":"2026-04-28T01:10:54.359165Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-06-08T18:10:34.6502Z","times_seen":20981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bcb1c2d55c0083132bb30992f30ba5d","sha1":"e1960e589026ee8b4162ad051970a58fd79d116a","sha256":"a52eb7d5fa30a4955c6b9261438d2b878664904b4e3bfd22180672d57f7f36fc","sha512":"15b7e90d2e64edb47c9fe9a406003baf411d55f3249ddbc2e2c1dbc8c4700fafb11c498885db8c5b1d56e2d1af06ff86565dcbb2c803739c4c2ea8b49a72f3ea","ssdeep":"","tlshash":"caf020344b2c102207e808f9c0cb85ec393d72a2d018a4a0f869ea792c548bfd163edf","size":558,"data":"","first_seen":"2025-11-12T06:49:22.766105Z","last_seen":"2026-06-04T20:17:33.250986Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/2349889433227e69.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78bce7ce7acfc3881e181f458e56e281","sha1":"31b0a2cee84238768b19d60f5bbe95073f85f927","sha256":"bb5a1ecce51f1568ea7b8136da53386bf996288fcd864ec646ba176b5b858af0","sha512":"3dcc827162e8eda233878321092245d82f2eb30c1f09cbeaaedc63426ff11efef495f99064aefcb610277b3bfb0266890fe6ebcfa75ea538d8d58f5c55f1f96c","ssdeep":"768:giSpd5w4FuUe/y1xxzgxk93gtaKoYYS221frDQUkP/M6+rueVutcc9m4V:ZYAymxktgtDDQUkP/M6+ueVuZ1V","tlshash":"dc636c63324228f65bdf42c6e02e8606e33915d6900d4124f7aa5c3a5b61fe890e7f2f","size":68403,"data":"","first_seen":"2026-01-11T01:55:53.41201Z","last_seen":"2026-02-19T17:02:28.846589Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/op1.js?v=1.1.3","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-06-04T16:54:35.410859Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-06-08T19:58:56.006513Z","times_seen":52989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-06-08T18:28:05.034183Z","times_seen":39792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-06-08T19:34:11.24863Z","times_seen":156829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95fa3942230da52eea85aa98acd43c97","sha1":"3d533cb5b7db33eadd80836d3d43c9189ff6d3e0","sha256":"51486445f6afe27ced0ba0a7243ba591bca8c0139c00a397f7017f7c922575a2","sha512":"e9b618c4e4267b5111b8cf6dd75c06477b08323c255a8c7ea25bfeb0b3a24cb30881dffcc18b06d2ac631dfa45cb04f9ad631e0197fb85c25cf2576877386797","ssdeep":"","tlshash":"59411d54f40ef9b16852de0f223a4e3584c49ef9d271d588f38dcad642c35ba439968b","size":2291,"data":"","first_seen":"2026-01-31T21:08:57.389508Z","last_seen":"2026-02-02T22:33:10.222291Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04154f51d4a2a3e7b8f2de9bdbc1fc65","sha1":"4dd00229b7a8ee9c255890d53df870fe2db58301","sha256":"4583ef1ea75ec2f8850e99374c4042671fc590ff27ae8fab4aa50f7a99bcc131","sha512":"665f6feff3db2eb53dd389cee4b235f6a3a599f0ad95fdd71d35e5d6a26ded6ecb878cfb9f6d0eea9c48b2db776ce75392b87aed88381ce5b63cab939bb5498c","ssdeep":"96:L576kMyEYXSYWNYhs/sB5k0RZx20WbWVCydv76kMyEYXSYhHwV:0uSyAaQV","tlshash":"50b1be3d2002df4eedab2e58517d8c39258dc97b8725ceb8c1ddcd315a4a07867d69c0","size":5286,"data":"","first_seen":"2026-02-01T20:53:37.417627Z","last_seen":"2026-02-01T20:53:37.417627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/9c439f77bcf7138d.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84c3a7bfbd13e6eed8ef2600eaddebdc","sha1":"492c5eb4c2b6ea7d50aa47251107d02af9a99efa","sha256":"c010c5927a47a70ff2fba12a2c2fc224103a5ba1db45bff25a3c4ff53a7ed2db","sha512":"ba4d7713a6c6d0abc5f738d03df05c512d350afb9d0fca1ab43758499c61f0a263f9cc412611e7d64cbbb82481b03ea62829c5cd8719234fa3f46bac724dabcf","ssdeep":"768:B7Tl+Bi1HaSiLD3XirHJdPYKENWNDRYEpEzf9MSnS61ls0c2kXBdnXDnI8qhxCYb:B9+McSiLD3XiWIDRY0EfUH1XMOYb","tlshash":"2c13d8da73607251a3cb515cc4af0b81733758ec2019807c3a7da9cb69b0a5976bf73a","size":44681,"data":"","first_seen":"2026-01-11T01:55:53.441745Z","last_seen":"2026-02-19T17:02:28.745023Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/web-vitals.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","size":6599,"data":"","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-06-08T14:19:30.205594Z","times_seen":3486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/e149492fd2b771c9.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a12d44809162192ba73b80f8c5d0fd3","sha1":"e293050209f77b727fffe4ee9d1e7371ae845b70","sha256":"ef08e4d8e1f121873218f8b632fdb4314da0c291d34f5d2772c01dec8a24bd09","sha512":"3bb9845b4093a49bc074853bdea0a895746e2451f8d236f40f0c96c103fdfd929e79525719bcea7bb997c7fd3ffbf1c3a2875fe3bfcf6b7f37a60eaffc92de55","ssdeep":"192:/vmIwuHfoWLfIaN6igj74xSkZiHV/ZoOR:/rHfbLfF0j7tICZb","tlshash":"20f1a5c613a4528cd4c64658ef739850731fa47f7aeed5d08a8ecba4b58b8c4f603859","size":8023,"data":"","first_seen":"2026-01-31T21:08:57.304794Z","last_seen":"2026-02-19T17:02:28.859329Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2870c37277e2b061986ce35bbcefc5d1","sha1":"f37921f74015e08ee0625648ae697de9f4c11a4f","sha256":"d3e1a6cc1c55b4d31e8521c79dfdceba78bec28e85147d89292e00beca6ce9a5","sha512":"1367f9b658ba79e40cc32c66689930097ae53b72e9bcf4167bcd6eb530de9b79d78eb84e75e64d576f44882b6da856c70363e900089d67e20f787dc57e93fc69","ssdeep":"","tlshash":"11513e2d600aed0cd8ab5e5e013d5e3655cdc97ad766ceb8d29cca76424a038a3c78c0","size":2946,"data":"","first_seen":"2026-01-31T21:08:57.391699Z","last_seen":"2026-02-02T22:33:10.224804Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"933682ec098a27832d260e61f8260676","sha1":"0ac5c9c38e3fea3e6d0e130214cdd6d2e5320589","sha256":"ab6f2925bef418c90d646c90bbc67f787cad8a1e24047eb5301154b6efe4c6a0","sha512":"da7fedac24b8f0fd363aa084435d5fb90cb1399fada749a35ffda540be9944d11869570f66389dda6f8c3f0d5e6b2750cb7b00f192f6976ab0559726a73a5898","ssdeep":"","tlshash":"5e51f03c2016da5de9ab2e18117d8c39258ec97a9726ce75c2dcc932554b078a7d35c0","size":3136,"data":"","first_seen":"2026-01-31T21:08:57.39267Z","last_seen":"2026-06-04T16:54:27.261575Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbcaa96b6157551a8c8c0c2b7f08e5ec","sha1":"a2e0ce031aabf512cd5ad17b90903c681a131c87","sha256":"2e350167097b057c9810dcc2436e9451c304755a97c6c75f2c15b75a2755b7c1","sha512":"122c0d1a67e85e4b0fe0fe48b89e6c81ff53d76bbb85d9e2445c662659ac9b31223a46a9865093245220758535843460694d81d7f333e62b1fa2ca09a1eae722","ssdeep":"48:LSJtLaXLdAul/+1jCQQ1iSa6WHgOkxpqu8wQDIh0FmrRiEWn2iD6RVLNIcabbW2k:LI8LO0BKuxdWG8heT","tlshash":"a4b14a0ebc19db019d3aac7d023b9f7a44ccce73cb61d969919fcd490a166f21be8841","size":5463,"data":"","first_seen":"2026-01-31T21:08:57.393482Z","last_seen":"2026-02-02T22:33:10.225905Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fec25bfae45d385fa351dfed85d613ae","sha1":"1948cf25c040432e5d3eaf2caa2101daf182b5ae","sha256":"d267e487102a6c2cbe9fb44cf91fa0e008d7cd182cf666d71d9ab8b14993a559","sha512":"ef9d40c74bb2074d263c98d805e596d293adb613d609bd1ffcf54118ae3f3f604e94d895df7fcb28e959d4f1aa9b49ada30f4f138567bb52656dd1cea0c750e2","ssdeep":"","tlshash":"1131462e7c15df0aec3a7c69003fde7b50cc8abb8254dea981decd150a0a57a27d59c1","size":1720,"data":"","first_seen":"2026-01-31T21:08:57.394345Z","last_seen":"2026-02-02T22:33:10.226452Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc48946414353a508a2e81688dc2256a","sha1":"60b4b3d7a8361dfcd3cc57643430adbb79222f32","sha256":"2f1d469070d877446b7a3eb789f05b5b88ffdd772027f5a721c060966b8f7467","sha512":"f08381bfd86816af3e061586ad25ae232a4a0054421f7a2a91c453d8130f294786baec00b7b70df1fb95f3a66282a3ba4401a53d878ff382e317abd0d4f09b7b","ssdeep":"","tlshash":"25f0e5e2dc12cc0fc3634e2d283e6c7532cdda7006a9624bbc94c9395dc6e380ad0d92","size":444,"data":"","first_seen":"2026-01-31T21:08:57.395189Z","last_seen":"2026-02-19T17:02:28.888807Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/surveys.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","size":88854,"data":"","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56349caf4abe4f80098d17cc84da57b5","sha1":"9dddd21f9e3d10ed06caa61cb9ca6108d9bc4429","sha256":"9c69e579ce81e354ea505e34972ed2739a74ff432308efb14e30278b969ee927","sha512":"53941b792038f5119af27067887a54f18d665d2d56c5b48105317e70568659cdf02576e310c858f2d35ab530062f25d3551c25d1c5b380d31f4a2ff911241c5c","ssdeep":"","tlshash":"1d31e89fd85af8507c61dede457e6fb685c6c8738434082cab9ee898003143353a88a4","size":1681,"data":"","first_seen":"2026-01-31T21:08:57.396111Z","last_seen":"2026-02-02T22:33:10.228066Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"117077563f2c1f0d74a6db8a343ef223","sha1":"468ea144153b444f350fc0a1e22f6814e17f2c13","sha256":"ca8ffc678653d2bf57ce5c75ae48a7910fa3842e9b3d69f593b2133b7e148c3b","sha512":"beb948a97beac1a9828febc89d875b114ba5c8e8be4f963d204c708ca5bd4186bf1c2a776e4d5726565c824a5c4d141caa712a8ae8777cf20e478849fdb64274","ssdeep":"","tlshash":"4631ac2a5c09ed46e97ead390a7eac350089c9b347505f6ac7adce0e298703c5ff4e10","size":1543,"data":"","first_seen":"2026-01-31T21:17:43.985516Z","last_seen":"2026-02-01T20:53:37.426475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/e3b0cf32d3668e3e.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e5379c1bbfbb186f837f831921c4f13","sha1":"e3b42b23015fe4463332662702dcbdc12efd3256","sha256":"fc40324411b1ef5263ea87012729f52d443136ffc93caa8940b43297f86b0c25","sha512":"45334f3cda20eedb7c3304206c9ecda79b42979634544f7eb54ae9b6fc8ad133e9b0cbe0dcc15585f769e74d50e0bbd599f8a2b5fa43a1a3d844e250053185aa","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlDE3BkefskEJ5sa:cuqu1gk+eUVkX+W3wCDENfskEJH","tlshash":"bae2a5e63602ba73e3dd01da50b64459e37e255e2009402cf97d5cae3a78949c0ebb7b","size":32483,"data":"","first_seen":"2026-01-31T21:08:57.293702Z","last_seen":"2026-02-02T22:33:10.107202Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e98d98370b9189e9319516ce9cc2953","sha1":"b62dd5b8392a4fbbd904529896e246f6f64095fe","sha256":"6e246b1adc6b2b9f732ec3a00a54a3c11898989e0d9c18de906831e16f33324c","sha512":"60178882cae6a4b351189baf4a0a7ab4f4711cca3c51016b39225ad74dd49e6c7c8d0188efd7145ea9445f296f1a882cb2a075788ffc292b88eeabe527ba6679","ssdeep":"","tlshash":"e131c69fd85af8506c61dede497f6fb685c6d8378434182caaaee89c003153353a89a4","size":1680,"data":"","first_seen":"2026-01-31T21:08:57.397856Z","last_seen":"2026-02-02T22:33:10.235148Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86a74f5f184204cb09ba94eb7c44ebe0","sha1":"82cbfc5730126f67a68bf55978565a8319a21e39","sha256":"9a16760c4a59f3b0e1befa7835483a7c388d3c0e2095fbb47e55ff8bde32ce2c","sha512":"77c0ddb1beb1be7516ad2eefa7a15bdd168a99ef9ffd957ab4dd8c5408a661bb43ae467a03e3c747d84f4cb50cc5eb3e2bb719a905fa552800b51da8205c19e1","ssdeep":"","tlshash":"fb31e69fd85af8606c20dede457f6fb685c6c8338434182caaaee898003153353a89a4","size":1681,"data":"","first_seen":"2026-01-31T21:08:57.398654Z","last_seen":"2026-02-02T22:33:10.235751Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fbcf6a3d4fa540a1cfffe923b3d5023","sha1":"4e793f3827a01e9c4e3d4550eecfe42ccc2cc00e","sha256":"612c89ad7a94b48c64eb1de27b51b969a3de814ab4d5ca2f17f4ab7e74c4982f","sha512":"a5d055d4a24fd88875fd4057d1e8002793101d1c95f9c846bf92e6cb4e205b42d0e620d2496dd730874eec5b2b6a694e377b9f723393c8464fbb8b95bff0cbe3","ssdeep":"","tlshash":"1d31f99fd85af8506c21dedf457f6fb685c5d8338434182cab9ee89c043143353a99a4","size":1685,"data":"","first_seen":"2026-01-31T21:08:57.39951Z","last_seen":"2026-02-02T22:33:10.236333Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e2016cad477c6d44523ff529dbecc23","sha1":"6f96871336ef4f329929cebf82088de58f11e30d","sha256":"f52bac6565e51b0233babc08265efc2a896a1dc65a0a3373990de093f13f5465","sha512":"9e773dce7f8fe5f1c7b6e9f77f46c759f021e99bbe5d5860f48e9e9ceb7ceb762c70f48ab26f2a47b8cf34760c8fce89ca119a6a11400a34ac7b0754d67f879f","ssdeep":"","tlshash":"f331e89fd85af8507c30dede457f6fb685c5d8338434182cab9ee898003143353a89e4","size":1683,"data":"","first_seen":"2026-01-31T21:08:57.400264Z","last_seen":"2026-02-02T22:33:10.237544Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a58b1036158c483148a6498500ddc16","sha1":"adfb3572031b4e494d77cadd191716f228b188a9","sha256":"8f82210ad7627eec5a8666d03c7e092d696f3d685ba0ba9f0d713def5ded4f3b","sha512":"dbb7a3fe4a741fc0f977a1790bad900572977950f95b1920a9d46f59c4029195a0a56474b79b514ab8ac4b2ed72b49f9256d66224e1d8dd1edfd6de4d0e5e0c7","ssdeep":"96:LA9bFE1SXV+lL82QbHjfBGN+XVXOEXV+xV+6XV+4VX8SeV+OtVX69V+KJV+DV+8r:782QbHjfBGN+memCj","tlshash":"0eb14778b41acd58ed8e3c15353f5c3a658d939b869ade62c2e8dd20828743dbf527c0","size":5425,"data":"","first_seen":"2026-02-01T20:53:37.437457Z","last_seen":"2026-02-01T20:53:37.437457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"628a443b8c10a7d417f27f92fb643274","sha1":"1aff585b6835510eba5d4b12f4d98f66292187c5","sha256":"0a9c3be4a96b264e1c8fa457b4f45afb3ef2913b4d2363ae2e8600a80f05a903","sha512":"e64e34c417969f0a01ce00d4337a8e17159dc3dd6ebc4fb87b3191a64dac3c86ad38c24ceb16629beb138e39488a27dc4b23488865613cbb7edc75015457b74b","ssdeep":"96:LK9rtxsnEXHuXHpq7Z9SXV+lCZ0XMXHJCXzXH1fsXbXHD6XrXHpSMXCXHyN1XZXa:pNMGmi","tlshash":"1ba159247416ce5ced9a3d66343f5c3d654d925bda8acf26c2e4d92083c7439af927c0","size":5058,"data":"","first_seen":"2026-02-01T20:53:37.439842Z","last_seen":"2026-02-01T20:53:37.439842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d2e1c9d716bb5af58185b181486a42","sha1":"33ee0f6e679c21056733388cb4a16e86fef381d2","sha256":"ee997912b3ee8feafa8139b9afb5bbd174e1a21590fdb80431bb8628ed62de9f","sha512":"5c198a811d069faff872cb150dbd3defc024198aee6690644df9802704c4a3e421670cc5cc5f7782bb532ee40e28d6dd19e59d95919b46f6c8c2d07d663a620e","ssdeep":"","tlshash":"bbf05270b04235e186a2222848373e0216be222774099800f74fe2206f7aa2b439360b","size":485,"data":"","first_seen":"2026-01-31T21:08:57.409414Z","last_seen":"2026-04-28T01:10:54.343399Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/c99dd6f2193578ac.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eabe5602d90013fa15f85a6fc6f890a","sha1":"2312e373488bdcd197a5189f2d76f272fb825fb8","sha256":"815a58522bb2f49c1bce5d54f1aec6e5c9c4fc41979d178e73397fdf65be846b","sha512":"e6d61874e6296af415a21d9c062c2657b051412569585b0aef4f2179d2d603fe640df9d8fe39b66a404d803fca621bf673ff3fe9d7ddd6cfb92a5f50852a4f6c","ssdeep":"384:N3+WOa/L3dxIv57SwaJAHTMYGeDFp3TXLvA3oLgxINGug/LecP+nZYr+gbYchU9R:IeOTMYGe5hjvN3IecGnernGmQFUM","tlshash":"92b2e9d9b361b06b53ab61da403f0405e2fea974251d096ce754d4c3b8b8ea990f7f38","size":24145,"data":"","first_seen":"2026-01-11T01:55:53.456823Z","last_seen":"2026-02-19T17:02:28.729415Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/f481d12fa6115376.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e41c714da5a9df953f2bc887a8be30","sha1":"23b51314442a5d523c045f83e46a8cf27ac8b29b","sha256":"f14145c9cbd9eb49621d7bae4751666c8256d371c32bec3bec537995e913b579","sha512":"a42dc09d57cd64f5b8156cac5a68d4b1f2555eb2021d6fe69bc1b1994547cec0e952745f5ebfaaa6f316f3fb3dc05c8fc82999b496523dc791d4c47875c3af2a","ssdeep":"192:F4SCYqp/cVReSok7GCaTBoypywK89KkKlVqxs9VSi1zPLSGDQma7oZLrBBBZr+c3:F4SU9IReSmoy88vSMAzNNdH/Rx/","tlshash":"be821bb52b54f470e2fe81dec1270829673f3b1e210a5435f17f8ced3924a627256ba9","size":18092,"data":"","first_seen":"2026-01-11T01:55:53.525125Z","last_seen":"2026-02-19T17:02:28.607716Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/0645c0b51de69014.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d45e69fbb44e738a07585f4a0e2cabe","sha1":"f8c9b2b7850b1007e4a64aefc1ea360954543a67","sha256":"0d3e866fc5f535bccc02dfbc1d9f5e717a06924bb1e2b7b7a97ea0b61c4a4006","sha512":"3c2a7ee5db4ae2941ec7ad4fff26f5672244af08fa839e54fd6efa302c1e5b43978de353aa5bcf3c96e9a0e8e5c8a2a693d962aa7f8cbc07b46435e5a2098986","ssdeep":"1536:6ofZm0sIEZ/gaCN2wIXdauLdKeyI+9DMvOEle10XsDJ+G6H4zJDVlDJKkTaVQcGC:QoN2wINauJXTT4z3KkLoN","tlshash":"1dd35be57140b5f85b6b42e1e47f8208b23d2978940e4468f3b92cfd22158dd71abfa7","size":142118,"data":"","first_seen":"2026-01-31T21:08:57.271535Z","last_seen":"2026-02-02T22:33:10.215161Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/4b5fc2a2cf150c41.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a2db0f51ceee4b64dcf2f34b7cc5de1","sha1":"9d13515ac8e3613937c7e41e704ff52760ddf473","sha256":"3e316fdf81283e8d0d6e95f67225560ef3c1c3b33230192de20cd9a9516a75f0","sha512":"80ac75dc3f6084d84660a5bc6fed6ae94440a6018061ed1fd18289c226952ec56b4790a8d42dc197cb5277edb1596fe26baeea78de76d04cb07d3f621a6657ee","ssdeep":"768:PfCxyEdRqNnKG1+g3fA1SjjDrxEBK8mO2V:3GyEdR2KG1FP","tlshash":"78d2b66050457abcf56708a8ba6dc40cb11eae6cc70fcf18b57c7c253c5a9816d96f93","size":29517,"data":"","first_seen":"2026-01-31T21:08:57.196019Z","last_seen":"2026-02-19T17:02:28.856281Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/3d29fa3d9e6cec4e.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"103bce398bf72f998ccceacc2ffe6e80","sha1":"db2b28d3061395776a370a3539b6ae3bf15d9dce","sha256":"29b058437c3f7686ecf84d33045a537cd24e4f01807e2af5cec8649b51b1dc18","sha512":"10f6ace8ef1373d40e4d4376c214dfaa5e4a45a1dd6a6a0106a59756da63c78791241555c08f24471707cff6fe63ed751d2acc6a6dd00b6ca7538073507e54f1","ssdeep":"96:v0dZm2etxGIWIA1srSVMS7frIDtjyMB0whWDxcxv:R2efGII6sr8j7focv","tlshash":"97d1734891969bdcf5b704a8e92e816cb06d5fa5cb5d0978f9bd38351e000d07e69bcc","size":6370,"data":"","first_seen":"2026-01-31T21:08:57.217994Z","last_seen":"2026-02-19T17:02:28.862354Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a1c7a8013ddf9fdb1fb4a0bff2a5742","sha1":"bde2c6fcb22398aacff2c17bdb41c65190b4aac8","sha256":"506affa02a71355b3143819f9556a167fbadeca4ce6ab2e1cb800d2e6ddd706e","sha512":"e78fc5a7bbde1fcb97c6b7583427cdfb66c329c456469a561c9362a1aa3fc93f4f477ba08bf5ef2c7ca307baed4b8e005f6367953aaacca17f85cee6634f2d14","ssdeep":"","tlshash":"8e310e24b825ce59dd8a3c36393f1c792a4d806ac74ade1a93e8d96583c347d6f23380","size":1856,"data":"","first_seen":"2026-01-31T21:17:43.990411Z","last_seen":"2026-02-01T20:53:37.444035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","size":4385,"data":"","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d67c9b2abb6b10d7ecfbaafdb5b9181a","sha1":"52fa0f7adc8b2d352b66abc1bec5baf4683d3f68","sha256":"27916dc2eefad962207291d32a8884d3418074afe51b41a5438d9012c7f0461c","sha512":"eb89060d7cdcaa6c876c85be38f2306f3b6b0f1621bf98fc61617a7e936dae32ff073c7ebb48ba3ca900673354d050f36f6adb1bf3e1bcd379409ccdf4a7fc81","ssdeep":"","tlshash":"7b713c687059cd59eccb3c61253fac39264d47aac55adeb3c2e5d960828b47cbf427c0","size":3505,"data":"","first_seen":"2026-01-31T21:08:57.403486Z","last_seen":"2026-02-19T17:02:28.902517Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c27f942349f4062694a39f2ca3ce5317","sha1":"66062a3f43737a25fed31db9b33fe41c9dca2836","sha256":"23d51377bb3b2bc289d3144cb79bcfddd97e7d18f066d99e88c7fd9b1ad61a49","sha512":"6714c20d82404c3c5fc77bf68e551cca73a51b7006301097877dda3182af4495d848b92321b43b8e86461ca1add3425907b0347506733f7c2b1e3a3107ebb75b","ssdeep":"","tlshash":"0e800474c1c00c17c173003f54341001017c4004444014001354515c1013355551fd45","size":34,"data":"","first_seen":"2026-01-31T21:08:57.405082Z","last_seen":"2026-02-19T17:02:28.90331Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac0dd6aee1f82652ddb3d2f6f22fd526","sha1":"b3d90e3dcb9b8476b9ceb0b1d7c636e5cebc88a2","sha256":"cf3febcdeae6ecd677d81e0cc3689589a76b30be5f334ce8d1350eba213dc3e6","sha512":"b5cb2699e8855db9f35c8fb1ed90afad099efb840c467e56d2c73a8f7eb920bcb6ceee6553595b86d453d3cfb2620e902ead1d7f2c19b80a7c4c4dd9210d7e9b","ssdeep":"","tlshash":"1f21e07162ff53b4541873f4c9278aa2bbdd2c787b49e788ca06cd1192d236ccc99897","size":1411,"data":"","first_seen":"2026-01-31T21:08:57.40602Z","last_seen":"2026-02-19T17:02:28.904038Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/27b71be17762de0f.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4096c4d4d5ac98daec5aa8644d190e15","sha1":"eda20aa13991a67cfa896c2cb095ff2cc3eeb066","sha256":"a4e704b26094e68db8a6c959285508c57e758610aa915c4c8c38bf9f71801e62","sha512":"20bc9534196dd3654f1e511b2f8762774d5621779a3f51c4251e567ac2c2cef57ba58e1c7e9d2ef5c54b9babb5199ee2c0a475d1908a5869ab905bbf98ec0a13","ssdeep":"384:ojpSDGGRkRSrTfIVZ/X+C90mkdG4+Z47aYSwTgqGFJp:2S/8Z/X+C90fMzZ47a8sF","tlshash":"dde2b6b572d4faa2129341f0c43f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","size":33285,"data":"","first_seen":"2026-01-11T01:55:53.408677Z","last_seen":"2026-04-28T01:10:54.33573Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"056fb3c868a551d7e6a64cf41ae20613","sha1":"3888cc639eba121e1623d9b6f07b38302dea3787","sha256":"1bef12ad84df3ffc564241391a9a54db7333e3b975c08b0dfb015d5c240475a1","sha512":"adc0d6f75ec696cf7f55f5c1d3f4bdf300aebbb762e7fec00f0e6e39e6b1c01a63b5f29b35166e857137e19390dfe30ff0102d7aeb120b2881578c8253cccd69","ssdeep":"","tlshash":"6f2142e556f435e0e601a3e0cc2090a87b5a20be2b27c6dcabd82cd0e75015d436cc93","size":1295,"data":"","first_seen":"2026-01-31T21:08:57.407054Z","last_seen":"2026-02-19T17:02:28.904795Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/48f61cc265d47694.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dee46bcb482bf82bd4c1029f187c68ee","sha1":"d7cf4d6188a9313e31590dacf5902ec8b1f1b311","sha256":"1943b9c626e8cf07bb3fc5f19f03effe59f3be189438303a477919db148bfc7f","sha512":"ac80a472ed1005853052a9817975646693f125531cb9f9d5ce6d69b490caa8c18bc06077c18d1ef30fd5b71d39b97c7fcec9559537c9f12ecd8c6e972743b9a0","ssdeep":"768:UjLnQztxulYXI6KJxcoQNLE5k96UJGSgf5djPZ+a:aLQYcNLGk96UJGSgf5djPZ3","tlshash":"d9130959b021ecbb223bc1fc906e1416b26d5d79e31a6a24f3ff896c131494531a3fa9","size":44188,"data":"","first_seen":"2026-01-31T21:08:57.327027Z","last_seen":"2026-02-19T17:02:28.753031Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/438b3221d8ed98ae.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"776e994809ee498e36929c1369e977ae","sha1":"bb87b2a8cad358a2b6b54008384ada9992d775f6","sha256":"d7ed199cabbda4d46f786e339ce99c16a7127aefad702bfc2e779527413fd749","sha512":"505e54da0c580cb4f6d9b2143e1d83e793f10296d84465dcba72442c15ba4bb2fef4385bf203f10566f6f2c935c91faf721172b36cec84945fdfd717b3ed9df1","ssdeep":"96:fWKeBCnhISV+FdytrbbUp+nOliRqCWj8HpQd4roafQBoabmj88p+qjFfww2R+Rg:fW03V+Fdwbi+OMLWjwdlpli9R+Rg","tlshash":"07c166e7b7c433a1904d437052237112b2be39bf33cfd9a58aac85c4595d84ca62fd8a","size":5995,"data":"","first_seen":"2026-01-31T21:08:57.243873Z","last_seen":"2026-02-19T17:02:28.633034Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d17e38240203d14ddff83a5ce07f4095","sha1":"73113f5c1bd321e291015442f4f952a067eafd69","sha256":"8fe946500e40b032af79fc8fce651316379c50ee0b1c2c5971414568d382e2bd","sha512":"e02f003d83c3a17d4f28669442ae66e1cc4f1af19934f5eb193ba471309a646e294d7108d973f3d57e3538293f7453f1ed38e64cc53fd9e52b1e7b8a0cc5c64b","ssdeep":"","tlshash":"944155b4b04ac919fdd93d56383fad37908982ea864bcf16e6e9d82041c547c7b616c4","size":2131,"data":"","first_seen":"2026-02-01T20:53:37.450789Z","last_seen":"2026-02-01T20:53:37.450789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98321c1d076765e8d2ecaef72b02e91c","sha1":"4d83828fa3026d7f5d2e706dcd3c88732ff580ea","sha256":"604993616d5d38b1b8cc3f0e3c4eee0ad6955bf079b3b63bbce5ac87165b8a3a","sha512":"dbcf178e171a7b558239e08ce2a5ccd5653e8a7b9bacc707ae4b174f0786399b73bbba34817d78d6e8f683904ebbd443ebe0e3b71730fb26e1c4d5de3dba4930","ssdeep":"","tlshash":"ca014139a124c961ce9b112b793f4cad678c94894718cc04565ed67973d687d5b3b480","size":805,"data":"","first_seen":"2026-01-31T21:17:43.996268Z","last_seen":"2026-02-01T20:53:37.452891Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f116a6e17b5499916aa4cf9c14e37464","sha1":"29226226a8b7d7e33f7f62fc4b0bb916e1bea585","sha256":"eddf47d0daa5a948c6e1de4e311178d2ae6cceb51723228f9f289f558a2f24c4","sha512":"158dbdbd41fff026dc343ecf68cb8b3ba24d458e69d52b195dae9168188e205e53af0dc2a77664c83573462993176a25990164b366537978bf5487660a48ac1d","ssdeep":"96:LvTkUIBhk3/TtVdzgmQ1PfNjliKSForEUTw+S59qR+f:7nA6Pdg7Nfll7fEUTwVgy","tlshash":"bc816f806b7bcab8f515bdae0b337c343c0128d32a12d195c7a5ac09d99443d5ea9ceb","size":4181,"data":"","first_seen":"2026-01-31T21:08:57.410236Z","last_seen":"2026-02-19T17:02:28.908805Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0e3483dbc707afc9343e409b2ef302f","sha1":"93a083c54d32eff9ab330d1467e310821446792e","sha256":"d075d9a8eab512645a484b04ddd2880f2662da6b4f291d416dd7a74437d2425d","sha512":"725d3686b97380c5edee24a9bec48c2d9264310342ecb8f2b79d49ee8ee61738aa5cc50a17f2f22ea0ae8537e451f1c2ce30a15f9798d3932e87b609d3bc6b32","ssdeep":"","tlshash":"d6619548b35dd6e4fc45bf9e02337c743c9128e721079999cb859e28e04403cdad5cea","size":3437,"data":"","first_seen":"2026-01-31T21:08:57.41151Z","last_seen":"2026-02-19T17:02:28.90956Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-06-08T14:19:30.211875Z","times_seen":5173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/8a9983e0eefa6ffd.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2778cdf6269909553d3706405b77a3","sha1":"aa1028f797111fbd2ac1fe8befbc5fc3ced497dd","sha256":"e05ee3375ac81e36ce934885bd42fd26f7873892d52da992947b6ca7ca198772","sha512":"8343355873776a7f3aa490a93a9d79e43be7527396f977f53e07ec8552e29b4fefd257638ee0c3e1e4ca1f9df0080d4bae32bf866763876a99daa0d247e9804b","ssdeep":"384:fBNKeDneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5y:5Nurxh54fVCb++n2babYVoNqfP0","tlshash":"04d23f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d47a67bce","size":29243,"data":"","first_seen":"2026-01-31T21:08:57.384918Z","last_seen":"2026-02-19T17:02:28.621203Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1028b0ae55fe86fa0135133a581f59a2","sha1":"9e391fb7cb34a6c09df81c765c9aadcdf2c8cc55","sha256":"1bb94cb864247f1b5105fdc6448b85b7b0b6415b0f1142b5d7dee84e8b30c2a0","sha512":"b774af72139ffc8e74f5d682b5cc48e68a5499a413dbd7e9e233c0c332f7807671e0997ae3475b8503f1e651c1b5a342c9a52643950780440be57185d3a10d82","ssdeep":"","tlshash":"6341ffe4a3d192b3234d7afd93626837f903e8a27916e0d981801d79581549ca9f4cbf","size":2042,"data":"","first_seen":"2026-01-31T21:08:57.412207Z","last_seen":"2026-02-19T17:02:28.910272Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dff027882da0341495ba68ca5b56b9a","sha1":"4f4d37397b761b3e98faefb77a8b942ebf95baad","sha256":"a594cc7275283b67b7400bc9cf684cb7ba5367425208953c24221ebdafd9b6a8","sha512":"d84cd09696bfa64b64f2fd4e785d1a2ba030183f92cccf9024c5d22ca00d5996d25e9f98f756e55a00409ae7c7b576016398a57c3d1199b17b697d22f326070c","ssdeep":"","tlshash":"c98000b0c0800c3ac0ba00233cb8300222ac808a80020080e3a8a08c22322ca8a8afce","size":34,"data":"","first_seen":"2026-01-31T21:08:57.412868Z","last_seen":"2026-02-19T17:02:28.910984Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/a7c7a8fadd85f653.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6736d35e645199d0fbb2c26ff1a4c4f6","sha1":"330babe7ad7a1a008df4fbfcc4aa2022ea5216a0","sha256":"a6c5341275522eea933fa0b30bbd42b98d1d5e1cf7db03c462ec5256d35523b2","sha512":"28bed02c6ff5722134d2315615d52efb1c3a29ffa7bb4da160554f9a7433ffbfb879ce9d3c2da0d6a67a42b3ad8476e0253814cf7aa8dd3197fbf256900127e8","ssdeep":"192:GL4RE0SZ4r+zeLhVbzB44ZdLIx+7TFnRA88KlWOfSeLzt:QOr+E5ZdkxGBnRA8flWOfSeLh","tlshash":"ed42c9546154aeece5bb00d1f82f810d312f3f98c60f8870b9bca8b91a645d43b56fda","size":12584,"data":"","first_seen":"2026-01-31T21:08:57.356712Z","last_seen":"2026-02-19T17:02:28.855421Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9051b8fbc6d56b1cc51ca5858a4b82a","sha1":"afea37999959d990d87a327c8e39eaf603f9f0f2","sha256":"c6aa20662b3e22992c12f4e69cd335bb7e6ba28893d596d8674e8c76016d3059","sha512":"2e4dd93fbfa65ae811516da2deae1871fc1495ccc63543a738cf67472ea4f3f1e0aaccc00cf3092f38388b7555be212fef4a55da7ee1ac7d457eec4c9080e314","ssdeep":"","tlshash":"b63145e45161cb7cf946be6c99232d11cd019deb7d91d4d641915812d0690e0cb59cff","size":1828,"data":"","first_seen":"2026-01-31T21:08:57.414289Z","last_seen":"2026-02-13T04:13:07.757219Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a659a4b0e579811bc5023929ba4844ab","sha1":"d22f81bf0900edcbd60abf802263d8ec80c8f5ca","sha256":"912749bf60af5412f1089a97b3ab5bd639378d17917765c0b01537e8cc49a753","sha512":"4916005e5e2a0b57b360240aecdc5909c87c486e19a985f79ba95011c4cfb1bea15601a4944e22754114b24ba7cfbaec9867fdf3126f28dbf91aba0abdba790e","ssdeep":"","tlshash":"044154e1b671563b23b8059cf2359712b7a7883b810e05b0f15e882d19ec8d9929fb86","size":2350,"data":"","first_seen":"2025-11-23T22:59:50.452286Z","last_seen":"2026-05-03T15:31:16.590641Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","size":29045,"data":"","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/70c45d6675f019b3.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"109dedfa8a9df629754107a4360cbed2","sha1":"dca0b5125582597623dd7a5f137bb172eacebd4b","sha256":"66937c36d62b42f9c0de04ed3961be40fff3bca6a84a6e8675ccf6bcb7bcb244","sha512":"75917cbf7e84472836f0f36f0d6204002de0ef185d062a67a4160f39b8165bcdb07ed964ccf923f78e9a4bec22cbda7fd444445695eb1f68f809df6d0d9a2def","ssdeep":"384:I+FjjzUO4kzleEPQKKUdoxUCHSWiDp1NpTLTJJQrtgG40/H5JiereqeCEYjYvbxI:I8jkO4YlMsdpCzifNpTByEqrddwR4","tlshash":"96e294a971d5f4910ba354b5803f500bf23e0c76296da0f4e3a2cdf9b9a055ed132f9a","size":31321,"data":"","first_seen":"2026-01-11T01:55:53.490165Z","last_seen":"2026-02-19T17:02:28.781185Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4904d04204e17635b3b5578b35c9ca30","sha1":"c0b6c903fe8c2f835b770549feff5d28a249b4aa","sha256":"9f44e491c01757f421aa47b533342eef1f9f459854a2161b91243b3e955f1693","sha512":"fdf27fab923ac1b2c44209b0f701f1db57d081814f59da811374467562ca84074a1d6fc171bda214378f2aa1dbdf1587df59a09e0bfa32cb49d6bc6b680bda38","ssdeep":"","tlshash":"77117275b01ac959fe993c06383e6d3b6049839a8696cf65cad4d861414507dfb42ac0","size":1072,"data":"","first_seen":"2026-01-31T21:08:57.414993Z","last_seen":"2026-02-13T04:13:07.759685Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d20642de5598670fa53acc2944bedd41","sha1":"607780618fe3f368ee947c55c7d3f27f6f8499cc","sha256":"b23a3fb96d58ac053ddadd6e53df1eab5ab0c0c083e7564fb76f4e703a065db7","sha512":"2d56e7c551bcfcf59e5deca97201e2a61033d0df70cab1b96579e045b9dabe39e34f9bc4c9055d95365702fd8f1d784e3e1f13bbecc078497b7df414ca34bb81","ssdeep":"","tlshash":"1a800470c0410c15cc35001fd4341101017c400c40001441535050c470751075f05d4d","size":34,"data":"","first_seen":"2026-01-31T21:08:57.415703Z","last_seen":"2026-02-13T04:13:07.760311Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc5fe6c5692f7c6888c23eb005d33bd6","sha1":"41751e1b3e744af66fff031760e14f39ab8e7e11","sha256":"c2fc027d772d7ec9cf978a65b519dfe1713fea1274c77e3803d45c6986b5ae4d","sha512":"5cb8da8eaca5c7c45243b34ea40b1bdfb0e44e2f7f2acdc1d07b6ebfd0663a576db364afbd777e7f8ec9709a33f841af426821afd9d870a44baebe54b64db262","ssdeep":"","tlshash":"8d31d09523ed92f9f048b4fe291594502c9321df7de2a178db613d20ba911484ea1fef","size":1710,"data":"","first_seen":"2026-01-31T21:15:15.04624Z","last_seen":"2026-02-13T04:13:07.760879Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/def7cbf195df9f5a.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"971912a88b8fc321b1e02c9bfdb119c8","sha1":"13a51b0bd9f9f2c32118f3d9316f40f973a5323a","sha256":"7514ca2d94bdf7565bf10f198d551a4a1b715765d20f7587aeb1591b808686c9","sha512":"bc0517c20439d8656f1c01310675031fcbc20e9b2d1ded2ab2462d47e47342d72502c75d35953d2b1079a3519a71e73ff18197b7b367a85769c427b44198fa63","ssdeep":"768:a4HG0/x/V2i4d9Im/22FljzYvX9ia9Qsm9:7mox/V2zdWm/22P3YvX9ia9Qsm9","tlshash":"8ee2d8997241b2677ae28196d83f0116f2242926140d803c76a9bcf77863dcff57be36","size":33270,"data":"","first_seen":"2026-01-31T21:08:57.211453Z","last_seen":"2026-02-19T17:02:28.670347Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18c8e920a48d5bb95921e6187c07df2a","sha1":"fb3dd7bab6f2653b6f4a734c0624ef46ca779d78","sha256":"20333bfd82aee4085ca68fc8768b0b251267ca5b5c93d3fd464c690eeef54b0d","sha512":"0a10abcba25f402288531176bc4ca609daf16ad26b3d678b1de79e37dc449b3a647d29b4efc90e63d2153d273fc1d0cebeae2adc797fdd432ca5751f96cf9601","ssdeep":"","tlshash":"1d11ab1cf9a004ba00e6715c5fdbe1836fbb858792444c2cf5c40550f70ea2b9543fc0","size":860,"data":"","first_seen":"2026-01-31T21:08:57.376306Z","last_seen":"2026-02-02T22:33:10.199626Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c67b78482e2ea3d05b16b8900491c7b","sha1":"0baac54493aae6f7443b7012cc9e219e2ead8e66","sha256":"2029b1ef0a1d17b6c66fa84330d55c085d32b3f1b5314178251f97cbcc22e2b0","sha512":"ad4d5ef97e94962e57c22494f10bfa90120a0333b9656c72df490ca43dee7b2f19d007c1f0a84de0f3fa1c0f1ef6f0934be0feb7046330cb4c1dacf8586d4849","ssdeep":"","tlshash":"bf219ad53159d468f808b6ef07337c62e82a5ad555f280a8d3938948b4c68b41e14da7","size":1213,"data":"","first_seen":"2026-01-31T21:15:15.047034Z","last_seen":"2026-02-13T04:13:07.761422Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-06-08T14:19:30.211875Z","times_seen":5173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/5664bd740cac6a96.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"838e5b67c708c3caa4ccae2ab6eccfcd","sha1":"b2666226e6fb839315d216fb69074265386b6b8a","sha256":"3afd0a23cf42518fdca2dfc42bffe1b2c611189b89799ecbae2386434adc8e3f","sha512":"845acf9755edd329f45184ad9bccde9249a2018ea514934ae462a84992c69b4db39d636b842de7d5c71b9187c3e2fedab2b41095dadbbfeb40a683b3f9d8c76a","ssdeep":"96:p7ctuv2BtSDxfARZ0kqJFv2H43uuqoE91YTkqdYqiEAXjv2YM:oBtDRCkqJFezuwgYjlXK/","tlshash":"d0a1b6b231a0f490d16b4294c03b441eb27a2d3e609d71b493bd8cfd67e544de6a2f97","size":4813,"data":"","first_seen":"2026-01-31T21:08:57.248038Z","last_seen":"2026-04-28T01:10:54.184543Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/turbopack-6ee26e047f7ee00d.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6b5b2e80a23c95aa5190c9fa05e7355","sha1":"876299aaa2a3feb741115dd1962580e7c343e905","sha256":"749012b61c5905067dbcdcfd75aaff565a61888df8f23319a9c2a249383b5aa9","sha512":"bdab1b321b5b551c66f7bc68b1264b62dcdf4ec75f066934487edc32c99aaa66ff2941603a2515a089f8c60becdf493ac753db8d7e46a500e063f6454169f2e7","ssdeep":"192:lspVl08YEsUnUj5E4dn2Npl/daXMh6lW9xocxkUk1MsI:lspVv40bl/A1UroQl","tlshash":"3b22c6da33b6f073436fa5e6807f0040f17944b9145d542893aca8fa38794ae46e7f67","size":10680,"data":"","first_seen":"2026-02-01T20:03:45.099931Z","last_seen":"2026-02-07T15:13:58.763248Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e94ee81f01b6c46a34d25cb1267b531","sha1":"316f65f45b52c49e2826a59b6d9e7cf098b3f163","sha256":"32b6856174f405088385c8c6681f87e5a23d98cc00b168bec5f7e65553f2967e","sha512":"3413b9f5962b070ad7ea7f8d7dbbd28e47e7d00c706a88778bfc71b2e67f4ec410518fd4177277c68ff80807180b2e2dd619ea18c6d43f8718b0830e5a8eb0df","ssdeep":"","tlshash":"8c21110471365659f95ccdeea2435835bca28f4578398f28d2f2192dc8b89ec0d794ef","size":1416,"data":"","first_seen":"2026-01-31T21:15:15.047952Z","last_seen":"2026-02-13T04:13:07.762022Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47fc33a115bcbb7a73308b5841dab94c","sha1":"9131ee30ce6eabcfb4c5538393de2e805969b0ec","sha256":"070a80f96f4e8531b9291857d19b97c2fe9bb8efc157863a45a702b308657561","sha512":"a9aea81b3c9906291620dd40fbcba69d34381e50efa5a2586068edf8aabdee4f1898db68566ffe26b69e7ce8e1cbe19446cdd81fd5c95d3354e5563b5b13281d","ssdeep":"","tlshash":"66b01275f089dc26cc75342b01b62e3105bd00c7000184005f94d91490d217d6702d04","size":102,"data":"","first_seen":"2026-01-31T21:17:18.014273Z","last_seen":"2026-02-02T21:49:52.989006Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c236e034006be48f651e4c6107d6c686","sha1":"20e4747bfea14c1312892176aded7f55c54670a0","sha256":"4de59df36b741479a9e648ac3385e37a5f2b4768ba5f46a4a1d24b9eb32a2705","sha512":"72731abea833d808e6ba0ba0c6687170df85c183efcae6f069a4855947ace432c0d8d1cee528187ed76422ed705069e3dee8d6760df6df7b7d8d5882fd50ff0a","ssdeep":"","tlshash":"6e31d2da6649b1c07445d3fc041358b4ba8b387b2f134aed86409598af54e98ceedce9","size":1451,"data":"","first_seen":"2026-01-31T21:17:18.015001Z","last_seen":"2026-02-02T21:49:52.989871Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/be7248fa84c6d551.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"598a7c75a166616da34d0720a50b9cf3","sha1":"35eccbe396ae1d530fb0174811f94c4a35dd1c10","sha256":"99be381c3d3f98808a540d62ec9cb7fe1797ff9e3588e5078a26d52374152fa7","sha512":"5ee7366a017183c0a2049c1735a9135a139e62ed6411726d18b9edce9ce57e7d27bf5fe1b8ce6f915773d1d20e0c0a9cfa9ee383dda62d3a65043daafe744328","ssdeep":"","tlshash":"5651a5413444b164353629a8a0bf000e766e1b75834cbe3296fd74fd262189cdb676ef","size":2515,"data":"","first_seen":"2026-01-31T21:08:57.246674Z","last_seen":"2026-04-28T01:10:54.169753Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1eb7fa09104259b8c4160c7aa5426d3","sha1":"129daa1018dd0207d9839d74a255c69db499adb9","sha256":"c0fd47073ba433a65ddb3a086f02d928ec7e6cc913295ec120fecb0f9266b243","sha512":"65715b1065c0a2a4f2f5bdf16356746803c2089dd6089663bddfecebb08c55f8309f478676d2e2232a4c7e054f85ac357cf998f7045b4ddd0ff6068b8cb0403a","ssdeep":"","tlshash":"22b01270e049cc36dc35381b45742d2101fe40c6020144905fd0d564e0e207e6603c04","size":102,"data":"","first_seen":"2026-01-31T21:17:18.01576Z","last_seen":"2026-02-02T21:49:52.990754Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e75b8340fa5dbcdbaa98f4a9ff444843","sha1":"d343dfad942f061f0541260081f37825f145dad6","sha256":"96793ac56e4cf2bef3d2345d9a0e93a44160dd6a8babbcb28d1730d8835317cd","sha512":"73eef66a783f0853e28dd9d4617e0f5a387f02fc602b73917f24f3f5d1ea05e22ce2eb2ad44c9720132c4377699a520d3135391395f67da3137297f5cf2abebd","ssdeep":"","tlshash":"3b31cfe12b3d60f2f22bb8de84572539dc0271db3e03888bc3b21d593159d5989594f6","size":1552,"data":"","first_seen":"2026-01-31T21:17:18.016952Z","last_seen":"2026-02-02T21:49:52.991677Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/1b665a0afce73dad.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2e0d2938c329e8e4e3bb947c411965e","sha1":"eb9ab849c9e0f4a8dbd455cecc450bbee2988bf1","sha256":"fa375e72bdd6a25673f1deb2341903ddb31dde73ac45085ff8146e1a750e7150","sha512":"5af91b03962f20bc171e220cc361e202255e5eaf4777430d72f2dc8780f4da664b1df6d7e8d2c8363720491dfd1b81a022437d4a1359c5f91d76b5d090e60be1","ssdeep":"1536:M7JIDwUDps7xdBmFLkjBnx01mId5iYthtVo:GIbDpsBCLkRx","tlshash":"4243d8d97392743117aa1225907e4107f7b999d0114b8028fa6dcdde3aa449ab2f3f3e","size":58483,"data":"","first_seen":"2026-01-31T21:08:57.240408Z","last_seen":"2026-04-28T01:10:54.143261Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a50b8abb9c9b0bb0df3bbdd5d4f56a8c","sha1":"e8203ff2130935192b95a67e69f4255a853e56a7","sha256":"25019ff5dfa77bdf6116a10c3c679e4880d9794055f8b6495196968a5926122a","sha512":"600771576212b4e589eb68407bfd63113195d3052063566ccdde13af47a2f98000f64a8bbe377e555e4ce744f7775bc6252dc92e6919ba4e58b3d9267801467a","ssdeep":"","tlshash":"56216e847726d930fc267cff02121f383a9528d75923549103d45b25fc118b6cba48fb","size":1403,"data":"","first_seen":"2026-01-31T21:17:18.017636Z","last_seen":"2026-02-02T21:49:52.992632Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7448c3ce60b7e49f4ec281d127d7f8d","sha1":"3246e82d721d35d9b2a6ee6bd56af3897f08de00","sha256":"a30a9d83e89b24dba1f29f30295ff41a15e2ac9c601850300158dac25983ed71","sha512":"d8be59e14e91a9457209ad0d2e984c19c683609a5f0a96336186b3a8fa3975b6a26f9d789f449f9d38af88dfe58d33132eed43d48424b54476fb392e9d3e9e42","ssdeep":"","tlshash":"32219dc093a7f7b0f145f86dc714772abd8c61f6531396e582928f48b8225e2c8b04fa","size":1405,"data":"","first_seen":"2026-02-01T14:20:22.539377Z","last_seen":"2026-02-02T21:49:52.993452Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41991b2ad6fd74830ef3fffe03af7281","sha1":"d0724bde873dbfb44164e2cc16509c6a005bf753","sha256":"1e4c05ff7f9b7e7554b1c288e42121fd9b224065954e16c175955fd38ca2a239","sha512":"166662558a7dcfdc8528babbd94770c5597948ef3607b54d4af5cdd1300756fd3381b9858a61a2d591a2c86585185332e40130e3868bf5bb45b0b160443fe135","ssdeep":"","tlshash":"4c5110a1a327cb7cf5ed38ff01ba2c28a9469cc16641d80a97c0dc5640864bc5e636ef","size":2689,"data":"","first_seen":"2026-02-01T14:20:22.540925Z","last_seen":"2026-02-02T21:49:52.994297Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/82dd7d6267e09cb8.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8c4246d22a1a06a7f417da630df5915","sha1":"9df9c9183bc1b5f82cd24ea69b7e25a5af00f7de","sha256":"853c2c482fcd17d31f8ed4788c289e260c3da301ce12fc9bf6ba190e61e512fe","sha512":"e5b56350b103b601538c2762ecb1a05102c648b66436ccf600010f6a699bbcce8ba8498a84c30a9f3cacd1637c21100d92e574d9d960c8e040936eee9261924c","ssdeep":"768:HT3NPN5/4OYWH7pyZpRATNxU2nwSre084SlFO1V+mtmlCg3v9aCjUeVhWqMDPSRn:z3NPN5/4OYQkz2To2nwSrex8jm3v9aCv","tlshash":"3023c660b14171762a4343e4442e03096f3e79b4678c546bb7ac9de71e62cca4a7ffb2","size":48586,"data":"","first_seen":"2026-01-31T21:08:57.230118Z","last_seen":"2026-02-19T17:02:28.742744Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-pot-of-fortune.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-pot-of-fortune.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30766\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"782e-19baced79b8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suSrTU%2FaPJVbdCYjlAeTx7RCM1r64R4QhxrvibpEDfyExRU5ssuZ1h%2BkYUbZ2EC8Hey78yTnokW%2FnfGDruUcVdQL36plKjrkDAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d4ef956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0896791d16ec7aac53acb957d4cd81d4","sha1":"8c38bb79c382042ece195cba8bce16ca0bc7f78c","sha256":"1b802ce7f60447d87a62b7bee5888734af4fd9d860101579c1a90bd8f4ca223f","sha512":"4070913c15b6a36c3b7cf4dbb864bb6d36eb34c427dc83707cc14d8dd2779267de5d64cce1954f08aef272c80c0a0e2c768773ec85aa7a8771002e98c3c21ac5","ssdeep":"384:CYCev6WjPfp2OsRNxeSLTDzD+JOsZNXKsOW29WOmqN1qB7dJ7BBaKrfAPcUi7Tyz:CuiWT4RteSLTD+bN4IB7ffLvLNhgwIf","tlshash":"53d20237e123e8e24857d8a455c06ea7fe453fc666631c2a38b311f718d48b73d74402","first_seen":"2026-02-01T20:53:37.197705Z","last_seen":"2026-02-01T20:53:37.197705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/about-us?_rsc=hf7zo","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /about-us?_rsc=hf7zo HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a8d8e895993f7aa6-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=hf7zo\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w75XwAaMnKQ5P4Y67a53zb48Y4JjoWfFRbUiT7tryBwbZU3oEJ0QkUeyygkPD3Kz2BPhXaE6ekEsQ7VLSrNvqDQYyF8CGqDWD6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456219b8e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T20:53:03.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wd%2BVCsWE74YcqVsVUvuMLuJJjBgkXNzrGVCwwku4QJ8ddR1PFz6AWD5%2FI1rPIODo0%2FhjdpAoYxov8Uqve1nUI89aI4j1%2FLiG1JEEaw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7456089f1db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":187519,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41811)","md5":"8a97e84de65158adc8470ea752111a92","sha1":"485f085de2af034fa71eaff3a2352e7701891df5","sha256":"33b8a46b3c6e070357d9a1fbe88abff1c82897a20a4e3ea5a11670332fc255f4","sha512":"960b8702309897fea57ba5b143d9054ae9e551c583ae7df794539725a7adfc42817a43d755d295074318a750c2a603810c0c23a76bd2d56cb31e81a8825fc998","ssdeep":"1536:BIIgIOl0ai1X7AVPYSsk10aXs76M/2yT+VvzrAGJU4B/i2f38pMZcUmrFC:6Ig7jaD6M/2yT+VvzrhJUo/i2/8Gtqk","tlshash":"ee04716ee80ae958ec56ed9e113f6f3a94c9c8778631c92ce3ddcd58015243a4be9dc0","first_seen":"2026-02-01T20:53:37.203347Z","last_seen":"2026-02-01T20:53:37.203347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":72,"dns":51,"connect":1,"send":0,"wait":169,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Roboto_Bold-s.p.1734e663.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Roboto_Bold-s.p.1734e663.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"28da8-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfrzdxWiNvxWwyFAIETq9PRRzqutgMh%2FHa1qmSdoEGuW979uYEIvGY%2FQSk257DK3dS%2FyN4zaQ3XNA4x5rp3utc1QrcxoFZd0VEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b3a0b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-06-08T12:52:08.378435Z","times_seen":5998,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/70c45d6675f019b3.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/70c45d6675f019b3.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"7a59-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gazFqpS%2BLDNbZULujQ533XWF2ogV0fxLM%2BNcm8sMhDfkaAzq6kgfgleHWK85Z1Ib2nYqI%2F1eKRl5WaWfFIkgp0%2BcoTGgboAjsWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b4a2b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30964)","md5":"109dedfa8a9df629754107a4360cbed2","sha1":"dca0b5125582597623dd7a5f137bb172eacebd4b","sha256":"66937c36d62b42f9c0de04ed3961be40fff3bca6a84a6e8675ccf6bcb7bcb244","sha512":"75917cbf7e84472836f0f36f0d6204002de0ef185d062a67a4160f39b8165bcdb07ed964ccf923f78e9a4bec22cbda7fd444445695eb1f68f809df6d0d9a2def","ssdeep":"384:I+FjjzUO4kzleEPQKKUdoxUCHSWiDp1NpTLTJJQrtgG40/H5JiereqeCEYjYvbxI:I8jkO4YlMsdpCzifNpTByEqrddwR4","tlshash":"96e294a971d5f4910ba354b5803f500bf23e0c76296da0f4e3a2cdf9b9a055ed132f9a","first_seen":"2026-01-11T01:55:53.490165Z","last_seen":"2026-02-19T17:02:28.781185Z","times_seen":96,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/c9d86bbb7c4acdee.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/c9d86bbb7c4acdee.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"6599e-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8xvPRBV2Bd2ZlPNmrBckc8tcOzAOW1jeuC4SKApbuB0OfZLBak3ctWICVbSeEEBamaEs3l6H6WzCl%2BYO8JLqL3sfHE2eZtXkVo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a6156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416158,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"375038ec8cec6aada72e25b152bbeef5","sha1":"c78b20a01aa625bdb0e1ab2358db14698586a570","sha256":"606e1f12073f6762a118cf232414bf2899bf3ffd6f7fd06ae61dd2363cd682aa","sha512":"97d64ef9834f0b04009a43f212061a31b40a484389b2959a10b49264597a5c6a9a2af0e7b45d248e3bbce3d70e036cee4a77bf53eaca3c7f7a670ab7d43b1c5e","ssdeep":"3072:ueuxDvbX1azHazaNQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEM:ueuxb7jV2ECNvms+lPnjz6x","tlshash":"2c940888b760b022835666e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf34","first_seen":"2026-01-11T01:55:53.513192Z","last_seen":"2026-02-02T22:33:10.118728Z","times_seen":69,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/favicon_2.ico","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /favicon_2.ico HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jan 2025 16:18:38 GMT\r\netag: W/\"423e-19446b5f730\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZlXoBHnSe8fZjsmgzVRHnr0V56ezW9k8u7UjQb6a3kdfSl8gjUwh2QXv%2BDwwbrL12Iwc4E4aGGnb3nsZgpxaMidNyPkhFp1OgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560f4e6556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"862625c18a78d2a3bebb3990ed8423b9","sha1":"8aee24aec86045963d43ece03ea0c14bf84db605","sha256":"52d8c3814a66882aeb937eaf0bffd819d7eacd69c955f34627a2753a645f4d76","sha512":"0ed2e082fbe2427cd903021e90a59106984919b00075bc99e49ab738a87204277b5353c14299c920755365083b2ede65436c0382f84a5acaa59495c9f36f0373","ssdeep":"192:oTEdnrvnSuNIa6yxthZ5Howi4lpoIhaOSvE+11:oMn7v6afyEW","tlshash":"5872dfedb1c30f87cdb57af0e12686414b620c7007587422617fb2abe267596ba0f94f","first_seen":"2025-03-15T18:38:34.505366Z","last_seen":"2026-06-04T16:54:35.351142Z","times_seen":92,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/eff55acea53ec0ed.css","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/eff55acea53ec0ed.css HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"53-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=394RFbszabvZ09zA6v8Cq%2BiteWAxTS4wmy0zSV%2BEuhNofAO43yTOlMgHC9cdf0JSZAs1yb0cHwVWKcOYnpxVPsvPZtbT7jd9xGs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74560b3a1656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"765bf9d3ef8ff10be0cad5b6d4e3daaa","sha1":"aa1b4bc7fcf48c46eae19700dd7509519aa0ba85","sha256":"f403a5500f2dcd2ecf20ed8f0d77487d89495c3d3789182da4975fe7db6e6559","sha512":"8da6091440e8422a6931d64239ad83324f260ae3fceb164b1f20954db67764ad5425cc19d1ec48870932e42f9e70c21349f9ea3179ae77bf8d8c1ac547289915","ssdeep":"","tlshash":"cea012804541f754e5d148f3d0ce2110888c4718019485e421541de0980742c1372f4c","first_seen":"2025-12-31T07:43:06.46324Z","last_seen":"2026-04-17T17:22:40.725573Z","times_seen":109,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/4dbb7151aa13c217.css","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/4dbb7151aa13c217.css HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"1ed-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il8LFL2uyPVkQALP%2Bv55hnBQ5CwgG8xjq1t6PIbmLrM5IEuNgNPGO5AC1gnftE3nhmXQT8jPOBk68xo9KJYb2y7rmcihJI7wLbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74560b4a1c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (492)","md5":"2975df78ce897504c7865a17d86a02dd","sha1":"75622f0db777dac2055698abcb0eccaa45cd19ca","sha256":"20693b666c550b94e5c07cd379a3223daae26b6ae469848e707744ef33768fa9","sha512":"d06b67ecd2587ffc16184843f6dfefd72537fbc41ea2bcc8306cea2ba049d11d97700e0cf2a7a55df49058c1bed9ad9d44ef778a1eab7ec58ee5a00d7c57c156","ssdeep":"","tlshash":"4bf09059c032118930fb6a1a9ad4e76e1458c1c3718888fd76282ffa9a21f7d4369849","first_seen":"2026-01-31T21:08:57.22202Z","last_seen":"2026-02-19T17:02:28.736Z","times_seen":71,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/blog?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /blog?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8f1158b0ce46b965-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/blog?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2HlugZBQLah9JiDb5G6%2BWAQPwowwyCitcR7PKpr027LHrxC8TxK%2B%2B%2Bf5KIHkAYP21BYrlcWkdIT2ecBxwGkKYJTEKFX9jPlFQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745620eab756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/providers?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /providers?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a3c99395674ac398-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/providers?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FXF3pv28XzQp%2FVtzBY9NL476ZoBa7aIr3hjKizddbm1TWNJ1X2CIgWMxRLKL3mHDqFHcu3mPk7xkzXJ0sw5efbG5Zge6g1Hvf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456228cee56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/ac1ac1fac020d469.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/ac1ac1fac020d469.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:02 GMT\r\netag: W/\"8137e-19c1abcba30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TV65L7MDBnjt3iOmzO2wag%2FlWbsEenXRGOQy0tfaOB%2F5z7dEThazgQl0C9xyF1Z5dqkovKHTeNCGTqZfNYU7z%2BWbL0xno2dnN%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b4a3456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529278,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55790)","md5":"4f582540052c0f3e6dcd9264a27e4873","sha1":"e0edb8ee158c82b58ff2ecaaa40d44dbe64541f7","sha256":"d6a8f0ca9d16f84806dbcb0a90cf39c8f904676e77e81a6186fe53f18ce2ab1b","sha512":"c7f888d495a8e4dd260535c0ab13bab642f50378b22d72f287fd4d5cbdb7b1e7f18381f5d970b18d91a522d996c65b0274e769f226c1e870efb6a3a308e93c9f","ssdeep":"6144:Da4781+VuYZlk8X4QAZt7dIUR9yHnE3Qer/Ut18OZzljzC4t:9PHAZBdIUR9yk5iZzzt","tlshash":"2ab44af93695b1735bb602a6407f1002b338196b240e4864f365edde74b884aa1f7f7e","first_seen":"2026-02-01T20:03:45.166965Z","last_seen":"2026-02-07T15:13:58.801993Z","times_seen":37,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/33f100802e817e42.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/33f100802e817e42.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"21e6d-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ivWrh0bK1Pe4gPhypOlRj40C34s4%2BWHj%2BG1nP6dw8eslTcik4xdngkL8BZun%2FbSJOPQgD1MBDmmmA5A3rzQEjTNf32Vy0S1b2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9acd56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138861,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62859)","md5":"debbeb6cdb7b1be6de8c93e038673ebc","sha1":"1f4885dc43cae313308c1cb103cc4c5f5cc1097c","sha256":"df401cb98f64505017cb9cc89ee34782afc0db5febb7f4102c2be08286280b3d","sha512":"5e25627b862997c1bbd192e9c1716099bb6486aa555eac7d5e37c756e2473825a8a670cfb751b9c5a5542b01b98eb6bbd3b9ba9ef9c4bcf786cec5267bc60832","ssdeep":"1536:UAnRBc9eym0bpa/Bh9QpfBuhCVKewjFSqE4eRlUxwugwoL5CLOrObU5W/Ndh9w2y:nnzc9eym0NN4CK7FEObU5W/N6yDQXD","tlshash":"e6d33ca53300b83599ef83ffe05645a9f72c2709c1099024f97e5dee232caa57157b3a","first_seen":"2026-01-31T21:08:57.287659Z","last_seen":"2026-02-02T22:33:10.157366Z","times_seen":67,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=b2ax3","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=b2ax3 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8b85c02b68696db2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=b2ax3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwpD%2FV4l%2Fr9Jxw%2BstFuNFDt2Iz8za0rAr1SPc6%2B1Vddkhp6bsekq9ziqUyuiluVTPQxz4RvojfRP05jwDk0CFpIaZBYffW9w6YI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456193a5056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"e2d75d4fb9f994f2d1bbb02faae811f1","sha1":"2ead082da29aceb47b2bc3320177119dee103a3e","sha256":"e32be8d410e2b915be60c16950587f1a3a28c9050a07d328ceca69f8b04f7061","sha512":"45daaefa9896045fc3b3a54aee40cf31e3bce9cfd38e005430de00ba3fee85feb1e3fe84929acdcd1d131d5226ab46d7dbbb87ad55461429ba87267947196d3c","ssdeep":"","tlshash":"9c61323e120aff6c6a2b054c545ec32a635d4a36f7768e76e2fd8d72034a0245b872c0","first_seen":"2026-02-01T20:03:45.187442Z","last_seen":"2026-02-02T23:30:02.775618Z","times_seen":36,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=1ynm5","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=1ynm5 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b73194f68a94f22c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=1ynm5\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBv5PQJxoCKgnru%2BoINaV7DzB8zr%2F3pIL%2Bm4tn98%2BXGt37J2%2F%2BLGcfdcnHNvkoOUTt5tB2q%2BC1fYWSFsZistOXTu%2Bg5YukaMkfI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456193a5756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3117,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2729)","md5":"a564b9144bbe60d7f399e52d4af65935","sha1":"312ce13adf9705eb2cb90650831cb2d50c59b04e","sha256":"4116a5f9b9ceecfc63f187e3b49f9f54b0339d3d98de9cdaf449139e6204f5bf","sha512":"1a8ebcde28255287c33c80612e3ab7ebc03497de9b7d4d63b8fbe6f1126840b96f66078e37072eeb0be1b0a6dd8cba95f8324fe7507c603ac13c1a0eee631b1e","ssdeep":"","tlshash":"2751327d120aff6c6b6b0548545dc329676e4a3af7738e76e2fc4972034a0349b832c4","first_seen":"2026-02-01T20:03:45.096501Z","last_seen":"2026-02-02T23:30:02.789459Z","times_seen":36,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-born-wild.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-born-wild.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60834\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:54 GMT\r\netag: W/\"eda2-19baced5690\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GI9S2QTopN6Tpe2yKziggQNDpVduffM9B6qUYWp2w%2BlmACau6sVCP0uUOrHDmqUO5%2FnuPHCHVYRwEg%2F2C8PozeNjqv%2B84g%2F5wi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561a0b5f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"348dd7e27a6d863affe7f325a0b739f4","sha1":"f157fb95184f112b45b1fbe28ddcdbc496d197dd","sha256":"36ffc5819360edf9446d2eada84b0952cac8f0b4a807a2eccc00ea1abec5d1b7","sha512":"89f1b8f928ed188ada9c8322ed35347f23e40bb0434d4ee80e8c9db8d61958aee388efd94a3d5062f3fa0f3dfdbd3045fc901f2b7e7e26d16d7a535fe5ed542a","ssdeep":"1536:ybqsLUvlFzfHJKIi+X1huyTNHK6MAzu6IOOHcjwnxX:vsgvlF7JKIlruyT1cbZxX","tlshash":"b45302705ba74960ee44693af4f64d09bb732f682fd3111c7ecc29b68b88055bc541bb","first_seen":"2026-01-31T21:08:57.31879Z","last_seen":"2026-02-13T04:13:07.635225Z","times_seen":37,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-rise-of-ymir.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-rise-of-ymir.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30360\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:42 GMT\r\netag: W/\"7698-19baced27b0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GlPztEeOu%2BuM5xWVQkUQHpdlcAWq7nS60UCLXpPrGV2PKmFy%2BjwodnIA6MODA21AgO1XGOgTB4krGcbjrFm0D%2F8u5XK4HY36ylY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3ee456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ade31b5df9e137065b18960aab218a7c","sha1":"cd0379dfda8ebe2c13f83a6aafb5df1e885263f7","sha256":"e03962243db50497168c724a4ef07a0433876602a7a79dd47a1a52b1f1d704db","sha512":"b54dc618a2af58ab59fd553d637cc0a51420d370d3565dfdbb37ef38ac9b644ac514c12707d70d9308dcc37d1e05ad507349061cc19c34e7c7fea10c96427367","ssdeep":"768:hhSIqV6io1RQgD3E/4/vDa4jJnlqWPZPYya8Uhv:hRqV6d1n/e4HhYyqv","tlshash":"fcd2f11addf31a31e7784eaf5a270c746a63e132323032fd0f299f695eac625170165c","first_seen":"2026-02-01T20:53:37.221449Z","last_seen":"2026-02-02T18:32:16.48615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/terms?_rsc=h1sma","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /terms?_rsc=h1sma HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a5dad20f40701bce-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/terms?_rsc=h1sma\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lQjNqd3ZSJwMPxmTg%2B%2BwJl87qjNwfkE8jcZhJOThx7SVAZmwJFueCDm7u8xq7yS%2BGmu5ZzZ1Qr6RCyfaD%2FGTH%2Fp2Hm3Hj8CGm4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561ff9a156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/944ac4923c54ffbd.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:01 GMT\r\netag: W/\"1121-19c1abcb648\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGbVZfaK9%2FYA%2FRJXe5rs4hblAeowGbuYdQtdmFLAFuts1BsXfGPDQry%2BmYIoERLWDuEDy4NTnqX4agiCRDW1VDbBvBeZkz9debM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745621ec0056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4028)","md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"63610-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZK7uWlw6gQsOyTc8Mi1LMaSkaVg2%2BeCiEy0X9JAeErvROwIPhkf73rjOS62HL3fOjgIL8Jbw4cj2goxidHgA%2FA764%2F2I96PChE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b29fa56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-06-06T12:06:51.421931Z","times_seen":438,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/19b0da46175198e4.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/19b0da46175198e4.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"75b3-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZv1z6tDVoXwUINVdMNaGnwE7NIWZ1rzNxfO9DAEOJXHHt6%2BNvItACBnV%2F34EUhdQz15UDOIt2oiEEdoVnuvda4DSzzN%2B%2F8x7yI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a5256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30131,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29774)","md5":"2007ebf0b401ba67c261030cfee8e756","sha1":"e38591bbe7d137269496a20c91da35ea00581c71","sha256":"e49adb5040e39e1241fb0ec7756630b4a0bbca6dc3cb4a82abb2c15772c1b528","sha512":"7768dae710c0e0a546c9502c8b1f5e49cde8ecd56541cf9dc726ffb8f694d4f5ed2ef5e5a27e26da06936686bb3f571f39fd2c81d85589f00808cf11c3353109","ssdeep":"384:lDxQbCQlLQVt1VmIudAorv8ii9gGTHR42VqzR6l+mgebWgrw1gC:lDxQbCQlYHmIuq9zrRUElHbWgrugC","tlshash":"a5d2d690d121b8b8ac6b89eef57d801d721d1b24c71d0b25b1bb6efc13446c87e53b9a","first_seen":"2026-01-31T21:08:57.374651Z","last_seen":"2026-02-02T22:33:10.172899Z","times_seen":67,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/9c439f77bcf7138d.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/9c439f77bcf7138d.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"ae89-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqhEoiW1dVhq1QcITkC0ILE5VZfcyyU2Q3GKVWKXCOgG2%2BtovFfYQht2%2FknSvfhDSfKtoXtgInwhSKX5E6KoLEcVOtFQ8gVruvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a6356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44324)","md5":"84c3a7bfbd13e6eed8ef2600eaddebdc","sha1":"492c5eb4c2b6ea7d50aa47251107d02af9a99efa","sha256":"c010c5927a47a70ff2fba12a2c2fc224103a5ba1db45bff25a3c4ff53a7ed2db","sha512":"ba4d7713a6c6d0abc5f738d03df05c512d350afb9d0fca1ab43758499c61f0a263f9cc412611e7d64cbbb82481b03ea62829c5cd8719234fa3f46bac724dabcf","ssdeep":"768:B7Tl+Bi1HaSiLD3XirHJdPYKENWNDRYEpEzf9MSnS61ls0c2kXBdnXDnI8qhxCYb:B9+McSiLD3XiWIDRY0EfUH1XMOYb","tlshash":"2c13d8da73607251a3cb515cc4af0b81733758ec2019807c3a7da9cb69b0a5976bf73a","first_seen":"2026-01-11T01:55:53.441745Z","last_seen":"2026-02-19T17:02:28.745023Z","times_seen":73,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/logo_blue.svg","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"556-199780cd538\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIX5RVDcsuSfCNLaJSJTZKnFWq4Zt5d0Ja3tURv9dxlgvqVA5LsM1B887xXYRgQUcVDPS7mEXy1j0oc7Z99CEUcWUnAfa1IgUKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456150cfd56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb70d90349998f9fa492bc2a907fe894","sha1":"54823ba083d0332c2ac42162d1a4c6f47478050e","sha256":"00f69279206e53c192bdc9472d434b948a56123c7e5c2fce096432e54bd87f77","sha512":"c4c0009e1577c177a428fed81430f234d6f65c83f2b56934bfb8b6a1169f6488b06ff24e8a144e15fd427366ec65dee3694acc028ed433460ff5a6545ae24c68","ssdeep":"","tlshash":"1f210fb8b099d936d234d36cfb98d42591a082d7c4c58069b0c9fb2f98698c35f1e3f4","first_seen":"2025-06-29T20:05:39.730735Z","last_seen":"2026-02-19T17:02:28.733605Z","times_seen":79,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/group/slots?_rsc=uarr3","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /group/slots?_rsc=uarr3 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-bf364bea96b2c4ce-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=uarr3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niX8atcvEeunTB%2Bmn7lUP%2F88zFlvfZiILFBDvftgzmM3waV9kw9OhuT%2FhFg2DQ7lS9SxBJglTl9UKHYyUCiZT7wTpAaJX%2FUE%2F0o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745623ae6b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1623)","md5":"3141266990260d4ec560a7bbb9008f54","sha1":"294d4aa5da6492ab89d7bc327bef2b3c6b5a6196","sha256":"ae6e4d5c165c1016bd85f6936636db65608809a9407ae038a76971d6f225cf6d","sha512":"664a833342e17509aacd6dc986cea4da264a16f4d57bb96ee5f7b9abd2e0741c0d7a9dd651e56c08867b0b819a634f17051bf5d4f6b10a031bac15a751f0e46e","ssdeep":"","tlshash":"6b4181abd80efc591c34cc5c2e6f6376958ad8338d345caceb9edcac05591275b990e0","first_seen":"2026-02-01T20:03:45.150188Z","last_seen":"2026-02-02T22:33:10.19216Z","times_seen":34,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/27b71be17762de0f.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/27b71be17762de0f.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"8205-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhSBW4MOndQBzUz7i9OkaGsSITBaratRFIeux89RpsI%2BmKeLj3OBbSmpBAmhSWpZT86zwanc%2BimnH0X%2BJIXoh76EF%2BfuN9r1b6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b4a2456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33285,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19160)","md5":"4096c4d4d5ac98daec5aa8644d190e15","sha1":"eda20aa13991a67cfa896c2cb095ff2cc3eeb066","sha256":"a4e704b26094e68db8a6c959285508c57e758610aa915c4c8c38bf9f71801e62","sha512":"20bc9534196dd3654f1e511b2f8762774d5621779a3f51c4251e567ac2c2cef57ba58e1c7e9d2ef5c54b9babb5199ee2c0a475d1908a5869ab905bbf98ec0a13","ssdeep":"384:ojpSDGGRkRSrTfIVZ/X+C90mkdG4+Z47aYSwTgqGFJp:2S/8Z/X+C90fMzZ47a8sF","tlshash":"dde2b6b572d4faa2129341f0c43f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","first_seen":"2026-01-11T01:55:53.408677Z","last_seen":"2026-04-28T01:10:54.33573Z","times_seen":184,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/track","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.1.3\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8d1706eaaf3d5a48-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nContent-Length: 193\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":193,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://zeroxwin.com/\",\"__title\":\"Zeroxwin: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXbRxkp7fc2%2B3Yzbsdha7X6nteN0GPkNkdNx6qL%2BAqaaJV7AoinnMLcigt7nRoO50GkDRdxImqw7lo3n6TAHUyfCfs36HHhpWBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c745612ea8956bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/account?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /account?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-afed0a1ce2d9c8bf-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 Temporary Redirect\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlocation: /?action=register\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmcRFc%2FUOPZbB7QhkSPZ%2FytG3tP2UgLaD6%2FuDQpDPT0HaV7Lanigg94rHorE1Dcd5bjgPm6Kv%2FaN2tie%2FDReTx2Tq2%2B5o4wKxLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bed4056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"text/x-component","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/platinum5.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/platinum5.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9316\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:47 GMT\r\netag: W/\"2464-1930f2471f8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPV3%2FKrzL3ut0FwLd%2FcGINsPLSejQ25I5v7IpdsT3ocdFbzAP6%2FU6VQbpuayB3ZSVtMsMQ4VmeaYIEryxxjw2tNo4oE9mx3vjxU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3ed756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39a29122513d2ccb49632724b56de0e","sha1":"66e55190bac1ccecb9346477a4e39fa08fac7ed4","sha256":"56dc4713aaa433ec4d423ff8c5080fb1cae997e9140f4aa800ed95f906dbffd0","sha512":"2e7b525d7d726f5c7e9e65f1282befaddb63a3be59d94249068bcdd54ff2ef10b9ae287f127dc5139f82641bd99a1ae973d56eb7634fd976dc0809eccc4016e8","ssdeep":"192:oK4FPabxOsSw5Dek5/a1IMKonmtKaZXeUVgBY7v+xwDvjgN2LxN0:WFCFZK6MfmtKsXeChUsu","tlshash":"9e12afa86aac13c454e4faf53464951e0d8e23c6d7e626e4e29c8b6669f13d27b340d0","first_seen":"2026-01-11T01:55:53.468122Z","last_seen":"2026-02-19T17:02:28.811392Z","times_seen":41,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc20-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Or0tnpDeL66Zfn%2FaB8mPf8c51Hx4WkF118O%2BYNNGT3vsk2zEXp2CuSfZuuJG7OcxeOwBvldAsbCUkSAvGNdNgdK0X4j7lMrSHg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b19e156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56352,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"0305ad7453af42d8f036dd29294ae5c3","sha1":"ac9a042a40e49e8cdbfe0e64e84d9b1c5724e98d","sha256":"7a73e6aa8107e0046eae5dd713bf4752d93e689f57d51c45b1545acddfd71be3","sha512":"d5a1bc2041edc0debccd45637460ac89ac3234859029b8507072d6232bf0f0e9229864ce51ea3b43eacfdbb029228242bfdca046ef86db05a1ab278ddeca209b","ssdeep":"768:VJRyPX2U7ifzsuaBqydjkUP057fhrrXtk1ay8zENP4EgzwtCE:DRyf57eQFdjkS0HC1aSAbwtR","tlshash":"60434b16f716871ee2936eb9c673d3a4e7b5bd30be23434b64755b2ade0b0e44c21284","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-06-08T19:37:15.101031Z","times_seen":764,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/ce91559d705a6f80.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/ce91559d705a6f80.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"c28-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8UhEQKQKqdwu72bXQFVTW5HKpszJ7nW%2FOJk%2FxWXx6In%2BVOsSp7oDoYSRu%2BYa2%2Fnfn3ujY%2FgcGIfj2XI1b0yaiXCuVfYD4aUcm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8aab56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2755)","md5":"ffca57ca28216716952658164becacfb","sha1":"558ae2e920765a2076592b4b168b3d4ddf339d5a","sha256":"bb1d593df6a0ee012c5e177fbff4f96e75910044292eb6e9d451a35eb38c2c2e","sha512":"c7bfd7c23d31e691b37e6158532f112b8c8a7cd587476f7330b4d41c6aa9e8113d2cfc819c8a4fe883caff42d186b029ed92e0f03ab20c04ca3024852228bc1b","ssdeep":"","tlshash":"2051acc21a4803bda9c691747215751393ae21bf75dfb4e4cb2d14b8c293888eb734db","first_seen":"2026-01-11T01:55:53.524258Z","last_seen":"2026-02-19T17:02:28.647973Z","times_seen":73,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 454\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":454,"data":"{\"sent_at\":\"2026-02-01T20:53:04.364Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.30.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"5920f4411be24a1ca90add8825c12171\",\"init\":true,\"started\":\"2026-02-01T20:53:04.362Z\",\"timestamp\":\"2026-02-01T20:53:04.363Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"web@2.9.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ipcy4GZv7X71GHhVQUjEaKdnHvJ6hIuI9wuxpBmqjBJGZ6o2Qv9h0Xj1PULVERV9EVI4uYsPKxurOhByYXaqUIfJzq9RWXVMiw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74560e4d6056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-08T19:34:11.182699Z","times_seen":705447,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/plinko.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/plinko.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2356\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:42 GMT\r\netag: W/\"934-19b7abf6410\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3uzIv3SGBCZgqkJVPFN3TvpB%2Fs5Szru5%2BfQW%2B%2BW5AhQKO3ypJkY30F%2B36UaQpYyDfZQXuZR7J44FH1PbGmZh22ExOAyXWOsLfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619baf856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7d9d76919e7318a5ab3820f0b2acf39","sha1":"799ca8a6f171111e9a5327dcd6164fa7f048750f","sha256":"293bc6e6d78141aeed6e9e5a9ab93672246c8242e29c205adaeb711cd3985011","sha512":"28d4db6fe84750a2b3544e1ebb9fbff3fbf485aad0e9a904463ed8bc9c424e40343a090814bd0743dcd25220c95bb87e49d053c1b6986ed60aec3def0a634450","ssdeep":"","tlshash":"c9415db53ea2cce67145276fa4abc9084cb09bc175c63807c2e87ae4825b6184ec584c","first_seen":"2026-01-11T01:55:53.452287Z","last_seen":"2026-02-19T17:02:28.805601Z","times_seen":73,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-le-bandit.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-le-bandit.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23916\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"5d6c-19baced4ad8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuMnXYaoQfBBlLfb7c2WKACd9XQXByr5g7%2FnraXnX1B96oJsZ8pjSnmHoBEy4mzMvqT0x5Lqwg13fMuPbNVm0dys5URgcn6Dj%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619fb4956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9de08f32964f5aee1456aba9222b1d8","sha1":"58208e1a34cf4b1c1d07e8ec16c5b2d087c6ef7a","sha256":"6feab35cf836410fc5d28e3f897dfb328ed561f2d5ca3f001f899228fe770e27","sha512":"f594fb83db37b86d62bce0c92744af5d15420e4ee6fa6798ca47434de699ccb75f1d241d495e7e500e57d56f3b2ac07421a588360823ea68d34db1040c4a5a90","ssdeep":"384:zjtb3N3JGosKlKwqI0Tf0sohTqWigKI7sz1rXPITx9DkYUAgLnyfgTQh:V5hsiKwu0sAiZ7wd9Dk/AC5Qh","tlshash":"2eb2f1067367179ad56df33cc902636ad3481adf336d8f09c4b06f06b8964b2882ef16","first_seen":"2026-01-31T21:08:57.365677Z","last_seen":"2026-02-13T04:13:07.630263Z","times_seen":36,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/bets/lastWinsNew?filter=highWins\u0026limit=30","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=30 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-aeb9190b73deeca7-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1d68-wYlJkCqFfgsAE6lctSCWTBIOSTg\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7br8iTlrtnw5800wx6bphqUlcYi0dVCFo%2FjZNvUcBVtYMIoiEJ2LWuPb89BUaPuZMptNgAW%2BNEa6yePK5%2F0JtbYPQYBd3tjquI4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74561a4bae56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7528,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aa6b62d4dcfcfc8daadd3f703d4918e2","sha1":"c18949902a857e0b0013a95cb520964c120e4938","sha256":"329dcfa03a2925b7f84cdbbc5776b6755c2a65a3f1b61dbccca17af237571cca","sha512":"e08fa79dbdd7efb3631d7033e26c7a7dd7936da9efd0762431134fe1f7d2e3ee13b2f583e73e663b9773c8c1b26b03813d3a8d649f306f5cbf26e7b736b8c36f","ssdeep":"192:u4joGFGeiMZMTbu6Hyiw6jTZTKjUxzL4A6E4ZOOz7PAcB0:qGWtItE8It","tlshash":"6ff1dd3a64f81ca8d01909c5b1c33919f8dd651728c4dea08f6ccf3da2f8959e9069fb","first_seen":"2026-02-01T20:53:37.235656Z","last_seen":"2026-02-01T20:53:37.235656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/bets/lastWinsNew?filter=luckyWins\u0026limit=10","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=luckyWins\u0026limit=10 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-903db783bbdb251b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"8bc-T/CrlFSMsmNAHU5CKTrA+jfFTSI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sinr5seqHkxK629WtIa2hqGD1MXf5%2FqBGl6POachwrGPXy9sML4LGLQJow2cEGCYR%2F8Z7uCLdFh9mOwa%2FcC2jHDvNgnFHTJ1pDg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74561a5bc856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2236,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"711c5629331784cde113c156bf5bdf22","sha1":"4ff0ab94548cb263401d4e42293ac0fa37c54d22","sha256":"bf8c035d61ad8912f20eadf3eda75152ede299f519b9db94e6775c10954a7126","sha512":"55df539e0786ebf2e90bfa0ddac0cbb157fb06329ae68b51418c13debd09d761c25fb2c0b29ac76b5516afdd2a6ac4d57e37b4365ea0bde977b52721604c86d3","ssdeep":"","tlshash":"65419f3a60f818a4a01d09c2a1c33965e4ed38172cc89dd04f6ddf3dd6f8955e9069f7","first_seen":"2026-02-01T20:53:37.237634Z","last_seen":"2026-02-01T20:53:37.237634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/vip?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /vip?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b4f0a192ec6d2c81-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/vip?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WtCxJJqZjkOIjX1qPnbdUbHxsturBGmJHdCtT4itcZZfojKFe3qmyq%2FJRx6pmAFqrKF2XOq%2FQAZ6Ym8KvWj%2FSTk1xe0YkG0yUFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456223c7256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wnxwjx9\u0026sid=2nHq17xI8ItYgnbCABmz","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wnxwjx9\u0026sid=2nHq17xI8ItYgnbCABmz HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-be89a7742277ae2b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CE%2FhM5TGeoCXszi6DOm%2Fe0tK14u2wW457kKGG2cpshZ8WRHjHyg9Wci2x6pl1%2Bmie2lC8HykFqY9gaJ%2BfB7NhpAstmE60GAApQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c745613bbab56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"af5d6129d7f8d87e86ea550a901a4395","sha1":"2f0545de85961cd5b4f8d90392f9e7438b601f3e","sha256":"d5fe56a83227873c7a1d4b573f6c41b2cc2004adb1e6f763023d6ca9f384c8bd","sha512":"5ba8ebd76039e053e6c625775940f261d22d147979002e180386d65644d0f1793acdec3d80d07dec8b35f522fee0bb0e04dbedaa8a1c62487a44dea92439fca0","ssdeep":"","tlshash":"e88000800a08aca23880002fb82238a008a02030e3080bcace0a2a80088a3002c30c08","first_seen":"2026-02-01T20:53:37.239402Z","last_seen":"2026-02-01T20:53:37.239402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-magic-piggy.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-magic-piggy.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23814\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:52 GMT\r\netag: W/\"5d06-19baced4ec0\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUhltu8xs%2BNUCOVL8hqNHkZk1UjvpZRTBfCs9z84HVxGMdY%2FCOAaSSaO1F4DZzNnkc%2FV10ifFyOjsgklJS%2BusLiX2Av%2FBDaH31k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619fb4156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fc8569ce1ce6917b822ad418318a5d0d","sha1":"5a363f41eec8893830d33e4a12a631af6a488d35","sha256":"a562a9511d1ea2bc4ac7107d1290122b084f416b1756c0b4672df2236ae97e78","sha512":"0e8c2cc8b16313b7fd81ff7c92c0d95413eee094706287a5f880dc710a440a9b60d74f70ab1a68ec31b4957a646dce396adc4099512aed14a334664e8f84c588","ssdeep":"384:7bOIVCWSHIRcCnqM/F45P5TZIvh5k5QWp63M47ZMAz6uF92iajNTmYSPciRrk4r1:7bOugHZCX2l5T0kLpSv7ZVz9F9faoYSn","tlshash":"a5b2e0371e5c509904f7474550dc83d30ce3c1a6b01ccaf69cf8645f4ae572bb86ea6a","first_seen":"2026-01-31T21:08:57.298342Z","last_seen":"2026-02-13T04:13:07.615868Z","times_seen":36,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/bets/lastWinsNew?filter=highWins\u0026limit=10","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=10 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8d9d9ef5ee833dcb-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"97a-fbnCFYB5qiZMZ+Kf/ha3na/r8ug\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIzje8JCcuokYAVR2MrWZaVb4BkbAzdsz5PRiPeYveKC46F968wcPSpDfPqGwqnQpOd9JYlwr38YZ3YVxU%2Fa%2B%2BMFJmEYoWK%2FP%2BU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74561a5bc556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e186cbf0ecc2dc5fdf78de8952176784","sha1":"7db9c2158079aa264c67e29ffe16b79dafebf2e8","sha256":"19228f29f39ad9ebe6c4d2911905d84ec15a56d00f7f0d91c6f7914d2a75ed04","sha512":"ec84be0bea4fd8e96a4ae31fa3451d7c1c10676d87d12ce8bd1880deaa22f408cec80869196210f00267574261277afcc5b2ce7a5309cd54ea4554caf171bf38","ssdeep":"","tlshash":"4a41a93a24b81ca8c0194ac5a2c33918e4dd651328c49e918f2ccf3ca2f8959ed165fb","first_seen":"2026-02-01T20:53:37.242003Z","last_seen":"2026-02-01T20:53:37.242003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/3d29fa3d9e6cec4e.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/3d29fa3d9e6cec4e.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:02 GMT\r\netag: W/\"18e2-19c1abcba30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEMba%2Fy0%2BrcynqjP3v%2BrKDXMjPqKsSL%2F9%2Fr3SyTl9EbUp5QSgqlv8GG5YGmatHX2hGwEhRJUH7IK3XeWy%2BUXx7asnCC6gm1kqWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456245f4f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6370,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6013)","md5":"103bce398bf72f998ccceacc2ffe6e80","sha1":"db2b28d3061395776a370a3539b6ae3bf15d9dce","sha256":"29b058437c3f7686ecf84d33045a537cd24e4f01807e2af5cec8649b51b1dc18","sha512":"10f6ace8ef1373d40e4d4376c214dfaa5e4a45a1dd6a6a0106a59756da63c78791241555c08f24471707cff6fe63ed751d2acc6a6dd00b6ca7538073507e54f1","ssdeep":"96:v0dZm2etxGIWIA1srSVMS7frIDtjyMB0whWDxcxv:R2efGII6sr8j7focv","tlshash":"97d1734891969bdcf5b704a8e92e816cb06d5fa5cb5d0978f9bd38351e000d07e69bcc","first_seen":"2026-01-31T21:08:57.217994Z","last_seen":"2026-02-19T17:02:28.862354Z","times_seen":71,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"63610-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 12841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=quVI83dxk65aY7cwpenzymyvrs05ihPDD0YFkR9FcPzFes0KYU0QNMFcGpF5U87c4bPDlFT6G1R3s3IcKs8sRrlUzjZfI4jqazg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745610afbc56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-06-06T12:06:51.421931Z","times_seen":438,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/vip?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /vip?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-bd3813aea1ac430a-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/vip?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYhLBcRuazcf5I2B%2F9vI2AZb5IwHR2WLHIYQdnxkiOC%2FKNBtysi%2FjxF1k%2F3bYy7jdVKQae3VeZ080EZRPFvombvMYw6Ww2NL7wg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745616def056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (941)","md5":"4842733e96c9c3864efb1eeffd83b221","sha1":"662d1ea605707b0b44b7360f29ee3fdce5565320","sha256":"b9cc839d17723b2373484b991bf7be420b83cc5cf93a7f18f7296f3d27834a1d","sha512":"e07f5ff93bce38cfd619eebc781805bcae511d29aacff7cecf4ffa0efcd79b4cb2da5c82cc66c9a8469d1f96ff396bb01c5a24f6fcd1f50b417d49bd6c998b9c","ssdeep":"","tlshash":"04519e0cc8499db498d9d59961d5d7016558bf37f1b88cace04bdc60138f03d0beab87","first_seen":"2026-02-01T20:53:37.244425Z","last_seen":"2026-02-01T20:53:37.244425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-marlin-masters.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-marlin-masters.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31090\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:04 GMT\r\netag: W/\"7972-19baced7da0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68nGo%2F8pCCaNWe6uLapugDLqKcgfumpEWT%2FKUuAHQQwFJ9mpZteIMh3DSjVNty0nwoB0ejOcPt%2FSWck%2BSP5dlmN%2FtY4i9q4pBS4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561a0b5956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1685b07e3a5ee450b80ca5578a6928c","sha1":"f9d81e1a083f786a54109554fab8e75ceee5e830","sha256":"3d5185f2b1008914d65d8f406012fb4c2e66cf4fa8df658a4c55eec894eb2137","sha512":"ff1d2c7ce4d318cebd8e548a418f6ce597ca178ea1aaecc396bd3a78509d7f3127df5d23e8c0c2f6ea98e0afd406a5a278f5fec4d89df715e8b3bafcf43fdf00","ssdeep":"384:M7u9rAYxBkq17Ghs9wIDU0CmwgwZdY4tmZy99PRsEo1XqBj/TVc8fq7dmBKTiv01:h9MYFIHIXbKY4t7959o1aZTB1BPG+o","tlshash":"a6d2d0fb0d1f7f1052e52986fc04b436c88505dca9c76f9ed296384dd6298b3bd6c0a6","first_seen":"2026-01-31T21:08:57.348989Z","last_seen":"2026-02-13T04:13:07.555945Z","times_seen":36,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/bronze1.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/bronze1.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4618\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:46 GMT\r\netag: W/\"120a-1930f2383b0\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKWN7wxsHomWMZWsJjzx5jeUmOgC2dQo4eJ9TC4B7vrWeOf4k3uW7y%2FFdrLw73Ob7ldfnLPU2ynamxorlXMdA6nnKnCUYkc8cdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d2ec756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37711ce0075cb6d2e33d9fa53d581193","sha1":"ddd492c746acac43247ae3f6e53e0bbf0e6036d9","sha256":"27826149f40ff6caf6ba30192fe08ff3849f92d7f7a65bb32f3d159c89680ea5","sha512":"f312756bb6fe212c0b9f9f42f0aee2f2660c5d17e2fb0d9395afbda3d13465849160fe8c5cb4e3f5f3862268dc8692a82115e82b5636184055dfa71c421f6032","ssdeep":"96:yrZBnH3hr9w51Tx6v49RdgzuWl5aSlcaRj9E3sxjIiD/OisK5:cnxRw1Tx6vEku253QcjIFHu","tlshash":"14917e9a1dbcee60a611ae879f200d3b4891851fc1384fb2bc56da69d709398d3d2344","first_seen":"2026-01-11T01:55:53.480446Z","last_seen":"2026-02-19T17:02:28.719612Z","times_seen":47,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/platinum4.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/platinum4.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7034\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:45 GMT\r\netag: W/\"1b7a-1930f246a28\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWzC1PfaFRp%2BO7LwTRM366SLpOEuIWDXcTui2FWF0h71161MfUJTpLaH0iTQX9FssGOAc5NPLPgk4FADV5RtOqh81fKOA1NA%2FfE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d4eed56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e0bc3fc285e85b799724522028cfb8a","sha1":"8386e640d367cecdac67b4737ede83f6475e7407","sha256":"a9287616ece0dfbb915845b2ff11fe7c2e6d97430e239a83b05fa95c2adc241e","sha512":"de7c205388caf17e287f63f2fb735c3a85600bbe32bf8750c6c665979720d2bb05007fb8b51319f8ff4c5afc83e3449a3a519208974b36f993f63faccdcc73da","ssdeep":"96:cQoru9pqWfpPBT1o7VarDNy6Vis49Pwp0oo+M3oyOK7WHji5/PPgAc+DyeaTGJci:/WH47o7VIYsQPwp02MGK9vj3haGmov","tlshash":"d9e1cf3f659474dad9f10bd978e7e4670e8895b72d58360320e7faa3540e38f883009e","first_seen":"2026-01-11T01:55:53.516394Z","last_seen":"2026-02-13T04:13:07.558506Z","times_seen":32,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/gold3.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/gold3.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6180\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:25 GMT\r\netag: W/\"1824-1930f241c08\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4IyC0P78XSoJ0ExXEpl642O16uQAb8oo1H9ed5xNp3bvx2bljwhr%2BiAkajz1MNPW5qZZ0weV4mzJHJMwMmF8vh03jdj1TrmtmQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d4ef756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b3b6925c68588a11877b4994c793345","sha1":"360d0a1cfe4930a8160ce69d30441a37bf0d56a8","sha256":"9359737daba5e683c10d20dbd81bb7b441ae5af9c138f085aec6da5539be9788","sha512":"751d244e5eccd6c6805f9b268fe435bf81381335371c92ee68e25d6ddedd0293c33a6b09589cc849d291cb5922ae2cbd3ce58cf15a137624faf9a93c23f3518f","ssdeep":"192:sCDeuxFQkAd+vAGo+KXl4R//v2NiqIvhrBR:sc5eC2xKRoIvhf","tlshash":"9fd19ef9a15ed1f5b6abf40e8438517b6f8fe8fc56516c0c49180364f24e275b444837","first_seen":"2026-01-11T01:55:53.553476Z","last_seen":"2026-02-19T17:02:28.870783Z","times_seen":41,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/i/v0/e/?ip=0\u0026_=1769979193796\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:13.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /ph/i/v0/e/?ip=0\u0026_=1769979193796\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a75f3ebd3304eda3-0\r\nContent-Length: 1166\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OXYmxwGKfECAxithJy8gfHnP5sRkkYwJeSzA9QAyOrNuXTS%2FisjuPIVbB%2FVlUhgLq0OXX3dxkZRBR5QyWzYsJv6O1%2B3YdCidhY%3D\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\norigin: https://zeroxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a75f3ebd3304eda3-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.117\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/i/v0/e/?ip=0\u0026_=1769979193796\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://zeroxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 53\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c745649486556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T20:09:17.543635Z","times_seen":34882,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/fcdabb53594fa7cf.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/fcdabb53594fa7cf.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"26d97-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQ%2FKSKgK37ZrXyZVFlVN5NpcBj%2BCTK6PWYKU0wp1sD%2B9AVJmi%2BrR6ubGMFWnnWLVIGt%2B7E6xZUEB0Cn0yCY0Wc6TeOzaUCWuU6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159127,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40218)","md5":"dc35eefdfb561070a6c3fd395b8b0e06","sha1":"0e99f80f3609455f7a1d0de1e932575bc2931551","sha256":"6df913cdbb4364f61f7eb112cf23d1b40438d47fe337266bbc9c0acefa387e26","sha512":"52c394db82cb28e8d4376c834989de504542e9d324d5df43688f5c03344a4388ec7328597a3396e7cdeeaf4e9384047a52d812771be24361972c3dac98d90cbf","ssdeep":"3072:3LSLiYawBqU4ebR8+K2k5tx9FpWgJlg4P:bSKU4ebR8p5txxdJlgW","tlshash":"18f33aaa33a725334be9829ea4b51200f3365658604e043cfb7c9dd7296888b71f7f75","first_seen":"2025-12-31T07:43:06.450662Z","last_seen":"2026-04-28T01:10:54.191549Z","times_seen":185,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/a85c5f2112ae0905.css","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/a85c5f2112ae0905.css HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"ce7-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ocy9GKf7ksc%2Ba2yyz%2FNaX8hSa3V2deY45qvtBYucEsfo5ZGB6uRuy7yFZGjdLZ7ukuxNgK6E60ipEW4%2B2ufyAgbwqjHxPGIE2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b3a1956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3303,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1085)","md5":"e0eae693638a4faffd4c9f557a7438b1","sha1":"6bfb8474afb2f4ba719f35fe3dc2aef001107552","sha256":"5d3675b31c9a19c7c528d457f5543f31e62ec5d85f076f8de0ca5ecc8bb47367","sha512":"3843c89db03ab7a8f9e518bd9e9590c414ecfcdf24e6eb6ae8ef9da51dbf37c9bebc3c1e08072f7cf75ed6b5610766e024574425042890a0d93396e2ba46ddfa","ssdeep":"","tlshash":"e8617510011e923ad8b59d97778e3fa13ca8bc90a5795d23e5290d2d8ad7c7b13f0f29","first_seen":"2025-11-23T22:59:50.498332Z","last_seen":"2026-06-04T16:54:27.244297Z","times_seen":208,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/8d97a31a2b7bb52b.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/8d97a31a2b7bb52b.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"c2b2-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2%2FAqk9N9BjAp3hrVb237wGCauJrTqQlnD2MvXIusHh%2FmLgK8MA8qO3CSkXEGcyZ82XSyxx4sYHGg5BKel3aLMSgw%2BoUHb0g17M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8aa456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49842,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49485)","md5":"7a6782562784798052f56f3f546edd76","sha1":"5ca984010f470a582d3d61937aa02edd1f2895cc","sha256":"eff3ee36a789baceced46592cfdf60b6b5c83bf5d7031b9e7789b45ba2e99314","sha512":"cd75a77848a365e4580e7897c2c9f6ce89280556a892969406e4219da7dac8e1d56ddb9578ed3b04593af3ba8a141294203fcc2a3366261d661ede7ac6ee41f8","ssdeep":"768:0VfQIsNtn3lErrOfQHL099txV8zlutf8uTpfQlTWH228qz9x/:kQXxSrS9LV8s8u9QIl","tlshash":"6e237484b7a5b02947a25191045b544bf278f938a4cc18acf360e4f628baddad4fff74","first_seen":"2026-01-11T01:55:53.523305Z","last_seen":"2026-02-19T17:02:28.656397Z","times_seen":73,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /ph/static/dead-clicks-autocapture.js?v=1.318.1 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185480%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: HIT\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185480%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.70.250.235\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697fa58a-3303\"\r\nage: 0\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIJw4uSGYYEMaI7RToVltxY8Zp9KkGMAs2D6aoueA9I68F91BYhliadH2MwXBVLswO%2FYgK%2FWyPZ%2BCAOIBaBD9oJC%2BkTAkOOelG4%3D\"}]}\r\ncf-ray: 9c7456154d4b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-06-08T14:19:30.211875Z","times_seen":5173,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-87009b3ff0358ef4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5G3LrCJX8KwnV97N0myhXHE6JexBezzeHeVX7BX5sRt0PvnbIs0OP0hH7bwCpB%2BjPbxiVzmk3iQAI3dNxyFBQ0eBQzS8aKo1Vvs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456191a2b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-ze-zeus.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-ze-zeus.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22890\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:00 GMT\r\netag: W/\"596a-19baced6e00\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yngx4JPl4jecGSLprZuxF6YKTl%2FC9KsQRvPS9a7EhsYIQOfXgeErVeWP6JENw1DyxF6Ek6c5Ykq0YxY7MaWmwrclFBSR3XBFJ7c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619cb0e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"046ca2674f8bb523fa67d5cba9448ff6","sha1":"b3ff82825c0043e287accb4ee1c7334508b1afc0","sha256":"fa288bd44bc3489a719862206acb1359db6e4c47410cc4b78fe3697f9f6f3b42","sha512":"da5c70d220c27b3ac669c32b6545b5be45bef5a3f5b6f453b9db88264896ffdcea58d193097eb6255e06658a656c7d2c8356e68a6e5db5d229d985dd55153488","ssdeep":"384:HY4K44kaqAoBscCWy8gF9XS/6Ol78ZAEfFOoBUdq6sOxcp6W4mlR2Th9wBYwyocB:4hsF6KybzXSyOsdfFOoBUdqaxcpDR2TK","tlshash":"b7a2e171367b923adebd87ec18073b451ad095b7cb8095488efabfbdb224421111787b","first_seen":"2026-01-31T21:08:57.2815Z","last_seen":"2026-02-13T04:13:07.575007Z","times_seen":37,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/home/promo2.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/home/promo2.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7574\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1d96-19b7b5da3c8\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGFhzEeDoRmNl4WL4re3IBii4UfyfKJpDU00zD5lIabv8%2BhthxE%2FF70W768J%2FJ4Auv%2FAneLwLnBCKobd17hYReD0VUIsO9hrd%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bacfe56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3539038ae01db5382d54a6c94823d21","sha1":"a9932b694e2b9a4111043fb5c72af4da83d71ac4","sha256":"db04cc3d02cdf2846d24379ba9dff05f55bd367222be7ba31e5708adf7eb8141","sha512":"189bda25bf1a096b42a402efc0cfa2d6d53caa3ee850fa2d9ac939bad17e2cd9cb1e9039011a5e66081fa5ce1c9e82318c2e22eebdac349e8c629fa3461678f7","ssdeep":"96:88NtxuyL0zqjkZRMK+UmtCPbSMRPHM0EWuQbaCvwZkLHFAP8jLeG5J3wLHH0:PN8ujSRQUASVCWuMvwCTFosZgo","tlshash":"f5f1c0720a6d0a7f7a0b4df142c9fe92d107788527a99d451d479fd081e55de07e042b","first_seen":"2026-01-11T01:55:53.552654Z","last_seen":"2026-02-19T17:02:28.854451Z","times_seen":73,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-wishbringer.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-wishbringer.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29050\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:56 GMT\r\netag: W/\"717a-19baced5e60\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FRqHnQqgCazkIZi1hw4qy7%2F7582z5CFlACwhYFJnIM7hCz3F4Xoi0r3VVVU8P%2BEoShZHpPvj7XG5avh5AXMP%2FEXUfEP4YtDuXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd1056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"97dd36063786f0229bba6fea6af1fdcf","sha1":"565b435f367c40f3bf75550eb20198ba03072b46","sha256":"65437ddf90335b49c301a8088ee7e659c5b588ca1e50d4ee4e2db110314eb46f","sha512":"ea8084afaa68a4844c478a3e3814abaf5ecde65ead4caf72cfc1629d2443fb7f76d15f4cf09da763659ce1c715da21528ebbeedd2e07bf615bba3a262498b612","ssdeep":"768:i/C5GiJAi7JOVneCq3kWF1ggP9HMvqgR2tqrmK:jpJAi7JWneCq3x1ggZMCWj","tlshash":"71d2f293a78c7605a16c81b53d9a83d5882eed5603b96435b4ccec3e63daf0ec541df1","first_seen":"2026-01-31T21:08:57.320111Z","last_seen":"2026-02-13T20:55:00.751116Z","times_seen":36,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/d2da9e44d9ba7ccd.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/d2da9e44d9ba7ccd.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"9f24-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkXl2YTxpuTyF2pvJ9S3%2BoMdPqeGb%2BKj77S9ywcBnsYfmE1ENmQWoeOT6U1rDsRysOSNfzpMqf%2BTKyf18SUNglclhZZH6ECaqy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8a8556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40740,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40383)","md5":"25632652a91d344165f56eaa4b8abf64","sha1":"dca754237017683fddb1ab6d2d7cb3f6b432883b","sha256":"0266885bddc7f8cb4545a8ba58432193c0ea7d157f97c24806614a1e752a3eba","sha512":"c9d3a8b0252a7e1e710444e2ccf94bbf6e4f859549d9c650bd26ba8508e86e8a936cab7c5a6be2d3f39a5442a4abb60a8c71c64a5fd09f0b3794fbee4d2907fc","ssdeep":"768:8Aco3d/bYvcIF52OZSSQcn26fGSxqoyFtwYoF5cPpT96eOmK20:8edYU6fT2WqdtkcPph9K5","tlshash":"e303b669d35063bcadc543b056265070354e15af30ead37897aac4a0b6d30ecd2af8ef","first_seen":"2026-01-31T21:08:57.261687Z","last_seen":"2026-02-19T17:02:28.713748Z","times_seen":71,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/op1.js?v=1.1.3","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /op1.js?v=1.1.3 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 13 Jan 2026 19:35:43 GMT\r\netag: W/\"1712-19bb8db5f00\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMqzZgO15V5b9SJzl6%2B1Mf3A0s1BnJP9ZYIu2ZR0oPGrKyktYZXM6tOlAH7BRibsTkXqoH2HFI2D1lBtGmzkrfE5O23b0LHU4gI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbaf056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-06-04T16:54:35.410859Z","times_seen":235,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 483\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.70.251.185\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-5jDZGHoDjZ8dnO5ub70XNl' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 10\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 20:53:04 GMT\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77gi3zBasKIQY%2FI8NPNQzdPC%2F7OT3eS90fTuSVexmXZjuf9qbbpvTMkwA0AtDQXRkwuCT2yqW9XZK8uhe19dPwdg9%2F7RQwNI6mg%3D\"}]}\r\ncf-ray: 9c74561188f456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (661)","md5":"18c8e920a48d5bb95921e6187c07df2a","sha1":"fb3dd7bab6f2653b6f4a734c0624ef46ca779d78","sha256":"20333bfd82aee4085ca68fc8768b0b251267ca5b5c93d3fd464c690eeef54b0d","sha512":"0a10abcba25f402288531176bc4ca609daf16ad26b3d678b1de79e37dc449b3a647d29b4efc90e63d2153d273fc1d0cebeae2adc797fdd432ca5751f96cf9601","ssdeep":"","tlshash":"1d11ab1cf9a004ba00e6715c5fdbe1836fbb858792444c2cf5c40550f70ea2b9543fc0","first_seen":"2026-01-31T21:08:57.376306Z","last_seen":"2026-02-02T22:33:10.199626Z","times_seen":67,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/about-us?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /about-us?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a35f89443df01e47-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYacEcdCp7Se%2BZBje9IVywT4X%2FD2VHKhIo0UeL209tckzG9x9sZ8FQkpUZBnEa7Me41X6NnbY9WB2VySs8FNCDcmpy0FZyKYX1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745616cee456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2460,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (951)","md5":"a49b539234487670d795f10c689c1c37","sha1":"5a82231e4501be47428a6861f4d20e4a01e230ef","sha256":"ef735d86a5c760823ddfe3ad82e347eebb5e0de8310e535bb1af5464a973caa1","sha512":"21edfef2ae527702017b203210a0a241919aa108bb5359ff118627746b472134d444f2860f0709aee256fca1fde54ee5cf8b938b53f20d48d3dc4db1217f4f69","ssdeep":"","tlshash":"73519e0cc8499db498c9d59971d5d7016598bf37f1b88ca8e44bdc60138f03d0beab87","first_seen":"2026-02-01T20:53:37.256411Z","last_seen":"2026-02-01T20:53:37.256411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-dork-unit.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-dork-unit.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23134\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:59 GMT\r\netag: W/\"5a5e-19baced6a18\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPiPBZyoAKKvKpJ3dSiiT4h308x8aAFU38hiYCCEdTnggKHbTHPKJRi3KjbkYdk2hn8UtUK4HpXwZStbLpyPmYcddcHfPp8CPjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3ed056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23134,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c85e858b08435a61f6f4fad8d66ed891","sha1":"e94af8a14ef83032607da121ef6ca9d30c53022b","sha256":"f7262ec47599352f7bc87ac33ebe0c9ccc5bab7985ed91f2aa6c4ba40605cd82","sha512":"438137dfa790bf54a25498694a6f50ca72701c9b04093b68bc01cf72b03b17d7e28bd73a41165c73daf920e98bc7f5c9b1bd00bc5384a0b0e5e775733a1cdb28","ssdeep":"384:c+GTXMW3TjRpzxibFJscOp5F0l2Usqene8ciM3jUJ4cBSyDWdbH:4NDVpNibb4pHqe9c5zbcBxDWh","tlshash":"42a2d0a4e71ad7a6df9de93a2e3508e038392b78813be255d4109b9bf3e01b479d1006","first_seen":"2026-02-01T20:53:37.258114Z","last_seen":"2026-02-01T20:53:37.258114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/bronze3.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/bronze3.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6220\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:53 GMT\r\netag: W/\"184c-1930f239f08\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKGdz9pl%2FQHPn4KX41QEr6bGq7WIi0oAyaB3MlKcLkossKTMKP3V7i9UZdoaE3i3XOksaHMyUw6OjfIKMR7fRZC99BW7Sbx13hg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3ed356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f56b5ceebf9db8e4bc2f43d20705b7a4","sha1":"3a0f8c7107bdacb95ac1205f247f1e2289d7ff7a","sha256":"6927df57077ad75918a5ee983f4958403e35feeee586f1fe6a2e37d9c290349a","sha512":"ad6f47faea2649b779d896be6172e08ee35622dd5a096c27e1183df06a83031417c55082fe49fa684a37598e5af554c7be176fb9437f69b8a83313d47bd6e0d9","ssdeep":"192:YIajPDawjYKw0w+GxgCSZWHnXETl8RdJrPFerpV:3uPDxjYKW+GxvSZInXeA/rN27","tlshash":"08d18dbb12c6ab48091c26d6161c7e9c85f53ec0356ecf4dc032a85fe10b8f17a3864a","first_seen":"2026-01-31T21:15:14.958629Z","last_seen":"2026-02-13T04:13:07.687567Z","times_seen":38,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/MustangGold.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/MustangGold.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 77510\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:45 GMT\r\netag: W/\"12ec6-19b7abf6fc8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHVr1EgQ8zRt05ifN1gpASx2ZsT0llA24sbGTMvX%2F8X3VByAe56MDQWDn69f2pjOIleH3OPygmg%2BwYPEcxHkxCb8thksbhxY1ZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3ed556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 816x1092, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f498ffa20bf3006c7857f48092878ca","sha1":"ef0a22ea25542f5f17a8c3df1b78536386479050","sha256":"15f7c6f12172a904d36571e1541bb59c18da4c54816c32c15b44decd5e4cc9a3","sha512":"b5bdb6a1b5eb0749a18fd95efad95dd7f32b346d09846b3adc9d57801f4f8c0fb3758d716097d961e2f1c601298207085d745f02c8f9ccd402b3766ffbfc195d","ssdeep":"1536:p/rEJInx/0QQAVeYT71HquLUDJBqp5XdVvJ4Jn/eJw2n:6J8QzYT71lLU3cvVvBP","tlshash":"3273120cf661a4b1c4ce23318a23b3125e545bbdb286d590d29b82d561f23efd923d6f","first_seen":"2026-02-01T19:32:48.089437Z","last_seen":"2026-02-02T04:25:23.378311Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-ancient-egypt.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-ancient-egypt.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40634\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"9eba-19baced5a78\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqdrxyc1moXsZwdx5piJMcnRAo7fH%2BgaH8dHYu7%2BBlHfU5FK7QdhjbAd%2Fh3V8o0XaP%2BkIfqlxkH84oYdV02kvLEn6sAKjyPdAr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561fe99456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cee1f7140a407673f052e454201b972","sha1":"ca8b285a46bec24abd174f745c20b68d4d58a8a8","sha256":"b076693348ddcf77c36db493445f294bc7c7affefa5342f801f7b56a02c34542","sha512":"bdf4efc68c5872ac44c4bef688ad9753e6f9fd2d0fa8f922344ad200f177fc8f53c8cdd931e22ab57176f79e66672d1b1d3ff9e5700fb73e5fe24020c2df962e","ssdeep":"768:Dt81lARc37uChver7KYQaH2POxFSOefIzR9+bRHYogrx4rNyZyWYzD1SVFWgekoI:Z81ScSGverNQaH2POxg0R9K4oWx5yWYW","tlshash":"0d03e12a93f2875bf164ae70e3641e97cf36bb19b5614b1fb8c459318f082e81d59230","first_seen":"2026-02-01T20:53:37.261578Z","last_seen":"2026-02-01T20:53:37.261578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/7844c00c7b87d4b8.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/7844c00c7b87d4b8.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"4471-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1XHypZp3ndtXzAApLcY6vI5uD9D%2FY8gunGLV6BUBDwUsDxeGQmLIA6mRX5EEuWtD9FSOZQaqRhFJTjtYYCFSwBrHbtDraHDnBA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17521,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17164)","md5":"f596bd85087ae8c7da24ce1771082c9e","sha1":"b7529d11179acbc5a77d79cf2cb3196e1dcc643c","sha256":"b8089e9f96c5d58bc21c3403009eb46a6d86ae550566419879b9615a439ba651","sha512":"fc9bf925cc24f25650d96a00d8acad75c7f110c1459c93473aa4e885f2347766465cdaf397133edf42f4c0fdbe22c42d36d0e352327382fa5a0be1efa1ad08b4","ssdeep":"384:Sjl699ZRlP6Xe9XEbp1k2PF/TG+IDCOa7f3flVC:Sjg99ZTP6Xm0bpfNbLI+Oy4","tlshash":"5a7229e02109793d909f118eb22a651d772d3a46e00f1838b27ddcfc12aded43197bea","first_seen":"2026-01-31T21:08:57.369086Z","last_seen":"2026-02-19T17:02:28.737399Z","times_seen":71,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/e3d00364d13321ed.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/e3d00364d13321ed.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"4753-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tPq9RM9gljTCVUQpF%2FFoZjAPeWnDusiccbVofDyKODm2mx0ZwesKNhfb9StvVDFlX%2FZX32521N7Y%2FPCq9igf8DuTtCUcdKrrSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18259,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9993)","md5":"2486934aebd0b00e55e68b6dfbe9d0fe","sha1":"848dbefe394be98e044928f1374fb59929c92f93","sha256":"11380db3ba8aec5597b4cde9773951510aa89424968a8c7435db112f37901b0d","sha512":"807a83e35db9c4bc646787d3a154bf2e80e386daafb9fd97ea6059fbde48bbc924847a8108bf120b524c4edccc89acd8e5139ae522a1a2655a29dc720a4df54c","ssdeep":"192:uF1HgFrAHRNiN/Rv3cGggerToWWeoedmPWo21UCS+94eNSIOEPZJJb1I+7mTH47C:YHgcRNiN/ojfoWpHmt21u+9vdmTHS5W","tlshash":"1382b6ea7282f0b197bb10a2c07f400bf2793565245d4054e7a6c8ef74f056e86a7f7a","first_seen":"2026-01-11T01:55:53.455045Z","last_seen":"2026-02-19T17:02:28.7957Z","times_seen":73,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/eb768583117478cb.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/eb768583117478cb.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1344-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7fXV5n96nmpVawbF3Tw6yfFEFmMRq7WMVBYjTsqXmC5BAe7HHwqkW%2B2N8yBlwXBYSKlGS%2BvGB3i%2FKltMqGQjHqZCUEiQrYIKH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbae656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4575)","md5":"cf2f085e4fbbf416372c204f062fda78","sha1":"e25ffad06ca3245489a474478f05d78d69203b5a","sha256":"95ac79e9e04a35bdc74d23248267dc235930c14e20b59c6536065072ce08696c","sha512":"1d6369070024d1452fbf563facc2e95332b477bb830bb3c1786e92137ce15d17dd0c81729eb5ea3eedb94d8195ad0de39f05b835b1a0f702f838f586a0dbddc5","ssdeep":"96:RgjKIjI4v5ksYquBKZ/L5QXqInDfwxbz4o:a+RRBs8Dfwxr","tlshash":"cea1ecb9031ca6ec7887446c23229423636fa1bf75de53b04d6fc9b458d74c8e7634aa","first_seen":"2026-01-31T21:08:57.370006Z","last_seen":"2026-02-19T17:02:28.648678Z","times_seen":71,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/inout-chicken-road-two.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/inout-chicken-road-two.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21086\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:21 GMT\r\netag: W/\"525e-19b7abf1208\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNSexuhq%2BkYYcehWzhHvauJK1Jdb5Bv2lPR8cNYAHr6NQiPRYFFxOIsv99S7w039RZJEFJjl9qBleJL7D6ImkZg1Mwnkr%2BsJDRw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619cb0956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c51819308d47956aae4f440b78a3738","sha1":"dfcf53c70c19bc4b092101b2747347e03914810c","sha256":"d24c9029163fcdab092d967bf9ca0e92c0765f65751d17857c65c66384d575f9","sha512":"8b5eddfbac12e44eed0c84d72bdb1236f8b012f2e8cef45e59c6c64fe63e0f165f60f774b1f7bfa532ad9c68edcd0a9b358bad2ff02ccd014c1db2a9e8e422ac","ssdeep":"384:ovnk0XgBvzmDivCF0nWW3N5p9nuW9JsnvagAHUeVbCKwnO4KtkP2N0D:oc0XgBvq0nWKYKGnvQt9C4te2N+","tlshash":"c892e144f1c681192f7622dcbb9edb86d5c085922048496ebb7e1943c7b2ed583a478d","first_seen":"2026-01-31T21:08:57.30618Z","last_seen":"2026-02-19T17:02:28.739386Z","times_seen":71,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-le-king.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-le-king.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15890\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:08 GMT\r\netag: W/\"3e12-19baced8d40\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PO03rKRAS51Yp20KakR7XdEAfV%2FLInK2qJJeHVPTGeagP9ZV1P9fwEE97TNQP1n6z7czOsJHJDkCz6ZEL%2BeP%2Be00HfKDST9tYu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561a0b5456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa03e260e5f273b840e13299f9240e23","sha1":"f834d3f2a6137fd4838c161cd0ec93aacebe4b68","sha256":"0baed7e7b8ae0d3c9f85bfd4189f5e1b897585295bee50d93b72e39c9f0f86f1","sha512":"1e3261fb0276d4c2db5b42774bbe5dd446dacf6a6bf14f7babbafc3b08060b9b74702782f62048465caa6df7cf9bc158c561cec42bce04d9a9b41d909e68e5e7","ssdeep":"384:GRF9abLN3uwNq5n6frPpvMg+/5utobr3pMVtg8K/UdzIOQRXgfHHdKySnwDoo:EF9abLN3uP5i1vMgKConK6S/dgwDoo","tlshash":"4662c0e1a62bdef6f3ac95eefa1dd1e0716480848d7f3b5493dc16b2cc85e0006a451e","first_seen":"2026-01-31T21:08:57.283202Z","last_seen":"2026-02-13T04:13:07.585453Z","times_seen":36,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-frkn-bananas.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-frkn-bananas.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14954\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"3a6a-19baced79b8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fK12lJNuJVaMTR%2BTzMUM9WsbG9Oj5Cr%2F%2Fx%2BA8liUlI3RoXdZBWPOFIKT3GD4eXUZwytABf7irDmCj2mcShXJ%2B4duOSaVJe2xxA8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd1856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"51d9eb7472ceb01ff4c224a7cd26e810","sha1":"96e49ce0efc871c40a54a224a3fe2f89000c8edf","sha256":"e40eca3bc17c166a2823892ae0f555684eac73e8529993f15ffccd0bc424b42e","sha512":"34d074885a9b3ac9a65a92fe28204c23278487ea27664a9baab045aa3048806b3dd5886cd74efc71e5aa1a7534a4b8e2514dde1a0b5d60f6b4efc0afa5773d5a","ssdeep":"384:p14LUdvwT1xgpqZJobboYGTI8nsHOhVYjBkDZ:n6op6osYsIusuhVYjBE","tlshash":"f662e16997df5dc683b9bf40281785e06f03244727ef657a9f1e4ad9a0770cb838530a","first_seen":"2026-01-31T21:08:57.20774Z","last_seen":"2026-02-13T04:13:07.583486Z","times_seen":35,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/terms?_rsc=1w2jt","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /terms?_rsc=1w2jt HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-834458a895598f44-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/terms?_rsc=1w2jt\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iw48tzzdupvJ8tv3JZ58MtonOYl7yUiIzb6NU2hYh%2BHQ29Rlcn%2BYjHzfTxW%2FxLUfkzTfDvYMgA5pwAls%2BYJIPlASVmb2APEAIvE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456209a6256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61388,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4147)","md5":"e4b831316350be03ad40430e951a300b","sha1":"e2fb580c2d1001bded4d1ebbffd3c3e26a55f2c4","sha256":"3a6be60b4fd36d9cdf84471dd5ca314979b22acfdc2482d8850d99e795783d8c","sha512":"631788f3b5b4bfe9aec6ee40e6e7eb5940e8eb6b2b1e8708587f0d8546b354b3d507744d03300c568659cef0d93161247273b757e2d78fd22cebdb121f1f8b40","ssdeep":"1536:lf8PRdMLeYRlnL/ZSSZTAh9aYZ4ICX5LtgWRfMynaNyi1+O8KBlTJsiL+V2z1+MQ:J8PRdWeYRlnL/ZSSZTAh9aYZ4IE5LWWT","tlshash":"7a53715da30957bdcafb0071345ec1eaf31d4238db66cdbfa9a95a25034b9241a3b3c4","first_seen":"2026-02-01T20:53:37.268004Z","last_seen":"2026-02-01T20:53:37.268004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/about-us?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /about-us?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a135f9efcee5112e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xZnmqGvg8A34j63Bv8AWVRMl4sPIEyLo%2BZvc%2BJ%2BgzD06ygGDDiQbmxQXcWxD0FR5KTCsWMbCsKsRVgja5ZJMZu92ZU811Z7T0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456215b4d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/e3b0cf32d3668e3e.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/e3b0cf32d3668e3e.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"7ee3-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvLHkKhGYV4%2BIK2P9m79l%2BwfZ3bIDklpeTIO9su94mkF9K2ZPQx%2FOlvnHXtT7Q4C1DHXxK8XavBuM%2BzWX0WrRh8ys%2F0Exd24tYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a5a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32126)","md5":"4e5379c1bbfbb186f837f831921c4f13","sha1":"e3b42b23015fe4463332662702dcbdc12efd3256","sha256":"fc40324411b1ef5263ea87012729f52d443136ffc93caa8940b43297f86b0c25","sha512":"45334f3cda20eedb7c3304206c9ecda79b42979634544f7eb54ae9b6fc8ad133e9b0cbe0dcc15585f769e74d50e0bbd599f8a2b5fa43a1a3d844e250053185aa","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlDE3BkefskEJ5sa:cuqu1gk+eUVkX+W3wCDENfskEJH","tlshash":"bae2a5e63602ba73e3dd01da50b64459e37e255e2009402cf97d5cae3a78949c0ebb7b","first_seen":"2026-01-31T21:08:57.293702Z","last_seen":"2026-02-02T22:33:10.107202Z","times_seen":67,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/f481d12fa6115376.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/f481d12fa6115376.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"46ac-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTfteuNrYB%2FEmW0DtVVrAoYKirqluB2QmnBL0Dmf7sGbO%2FFV%2F3Z%2FbusZIsPfVcc7aY%2Ffll4uw7XqHxR8wE%2FOQ7Hnt0kIq5RW%2Bik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a6456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18092,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17735)","md5":"c4e41c714da5a9df953f2bc887a8be30","sha1":"23b51314442a5d523c045f83e46a8cf27ac8b29b","sha256":"f14145c9cbd9eb49621d7bae4751666c8256d371c32bec3bec537995e913b579","sha512":"a42dc09d57cd64f5b8156cac5a68d4b1f2555eb2021d6fe69bc1b1994547cec0e952745f5ebfaaa6f316f3fb3dc05c8fc82999b496523dc791d4c47875c3af2a","ssdeep":"192:F4SCYqp/cVReSok7GCaTBoypywK89KkKlVqxs9VSi1zPLSGDQma7oZLrBBBZr+c3:F4SU9IReSmoy88vSMAzNNdH/Rx/","tlshash":"be821bb52b54f470e2fe81dec1270829673f3b1e210a5435f17f8ced3924a627256ba9","first_seen":"2026-01-11T01:55:53.525125Z","last_seen":"2026-02-19T17:02:28.607716Z","times_seen":73,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/b699731cda0020b4.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/b699731cda0020b4.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"3bc9-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOUq4cYD7P6zQpZ5gAvG7S1W2If%2Batzj32O2lnRlwtigQv9H4a0X20h34wJZF5KaJwQWzggD%2F90MERAUDGWFusEyfJclmIhaHOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9ac856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14948)","md5":"40440d0a26afb7694208aaa1124c32ae","sha1":"92e8a42be6d633c2e1600636ad212c413efc6dad","sha256":"5e5beddff18019122661132c259f1c8997d53a8136edaf8eff390948b963c9fb","sha512":"81a7ea351def4c29eebe87171688734b80801a7e40786a86a551687cd6bf81530a7f543c9fbc1fb6f4b42a857fa970238926bbcc24ada2c6b2b2d7389d2b0e08","ssdeep":"192:OqB5qeZR31Jm74v1o0n+K8jvZnSGQpXeXcBorSncmMcRD1o26Ss1RviE8VSTtrSF:Ooq8RhKnjvhm/p467EIa3XDoOar","tlshash":"ba62f7e576d2f071a3ba1ae6d03f0056f2691db4240d1010f369e4f9397489a86e7f7a","first_seen":"2026-01-11T01:55:53.572093Z","last_seen":"2026-02-19T17:02:28.75444Z","times_seen":73,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/games/home?priority=hacksaw","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/games/home?priority=hacksaw HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-aec37ee3ad346ab9-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"327c-gcFWS0hm+fvwCeKn4Lj2Hbke6lM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbFfuzMuF8JIOiHxfpAenMvvUjbn9GZAtrmTX91nPGAyWRm2BhKF5wLYD5jbFXgA1eEYj4bEVA%2Bnzt6ga7HApLav5g78Jv0i67o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7456162e2856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12924,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f39c92a6ae8f2533c9614b46b524d6fe","sha1":"81c1564b4866f9fbf009e2a7e0b8f61db91eea53","sha256":"ade28fd779d63605ed0a2b8167344d95e87f985ba858156410e028548ed69db6","sha512":"7452a4ec5e4a0d0f20d84343490134db51ffccf53295d245ea983f103391f8a847b74dfac97d8c662e865a370daf2e9ea4ea30ac06207464b9992a6324512af0","ssdeep":"192:A8m6w8qSDSz2jAiD9MunJANd9Ef8JmxEPv7a29G71GDu4AhiEIT8rj8:+/Y710siCw","tlshash":"3b42bfbac4a14ce9930f2f0164c72d0ef4bd2a2330c81ca97919ee78e56dd97e51725b","first_seen":"2026-01-31T21:08:57.359105Z","last_seen":"2026-02-02T21:49:52.856279Z","times_seen":34,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-divine-drop.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-divine-drop.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23060\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:04 GMT\r\netag: W/\"5a14-19baced7da0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vD9dn9eDcGtFJdro%2F3vYrtpCAjUweh5NZOud6YIh98lMr2rHdz086RAcqaf%2F%2BZAhXdVeKUxumhRTpSYedD34N%2BJmhqYZn6dsKPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd0e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf1d166378a3e9065cdd99144ba2fa5b","sha1":"75ad449df9c3d0eb8a06c5c1d946b52cfd38a7f3","sha256":"eb98ddc75576034d4e35aeb2c3e565016648f906b84ffeb9fc20bf190ab6ac34","sha512":"b3d7996ba21114f67b686ad66f85510db432dc1e6b105e2a76fff0c7663b4535c2a009cd13f648b6eb46311ae95c5cda90e5c31ea07c05d2156c6d7a8fd0596f","ssdeep":"384:BTLgQaOIzze7Q/ArY6Pwnyd7ep/f2mEE3beL6o6hJH7LLuS0pcD4k/D7CLpUQx:Izze7M6PwUQf2NErc6dbfd0p6VbWLS","tlshash":"20a2e1118f55000b9c279cfd1f0584a4ae7087c15ea8e9dbf66e5e8e26f41a47f00653","first_seen":"2026-01-31T21:08:57.228575Z","last_seen":"2026-02-13T04:13:07.620297Z","times_seen":36,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-pray-for-three.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-pray-for-three.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26524\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:00 GMT\r\netag: W/\"679c-19baced6e00\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXL7a5J6Gc%2FZ3LyTLEyReuKzN5U0fUlDT%2FqXgiJLyvgl3Hn98k7Kr%2BXVTDT%2FYKFmxIEygLljSDWvD5k9cpqGI7hlVj%2BTlposGNI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd1656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0d3db0bfc949221e16d80e078362e92","sha1":"30f5fb104456cdaf59c1453b5e0ef5108219e611","sha256":"cc75dd588c786a43908645a071a1707f68d7500002b70b059965d669a7f9b96d","sha512":"97a78ccdcd7002b36a486bda6375e138a3d997d08b57e350993918d5163f4c1ed8ecf19ba6b295f0be3dfabf40f3f2901e8320a58989bfb61ea484b09d81d4b4","ssdeep":"768:eDObjNZta2o8ug1Kdts88+1nI2zCrga3I9bYBQ:eDOj7tap8uCK3ssnI2zJa3I9bY","tlshash":"81c2e1293b367667b9923d20a2f00514ac66f4f028f5efcfa7804812c97e467f5d69c8","first_seen":"2026-01-31T21:08:57.245187Z","last_seen":"2026-02-13T04:13:07.620979Z","times_seen":35,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/privacy?_rsc=1v9tn","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /privacy?_rsc=1v9tn HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-9d12f41d4de5c95e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=1v9tn\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZXuMPgSxB3Bo2wDdd8k7x2ISV8rprLEzh%2F%2BpaJrTo6zWIu1by9aonmQiHe1zNggYd100zJxFiuTpg7YL4BOE7J7ahZ4SCz2rgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561e482c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/blog?_rsc=18dh2","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /blog?_rsc=18dh2 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b7800b03749660f2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/blog?_rsc=18dh2\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnzSjio0hx0Dlacsbs%2BSMCc1YjOs5za7wUzlgaMAfDqgZhBGvjFFSaqszPzV6xdnbLH9%2FNsXifPvxM8bGHj9eNJtIC3IDcuVms4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745620eabc56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Inter_Bold-s.p.fbbe7604.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Inter_Bold-s.p.fbbe7604.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"65560-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1Nu2X1SZmLWLgdoghqfzZ0BZoYyJNbrdoQHQDuxyYjdxmzuG9CwWcEp5mgVQr%2Bn1noifWcHqad9FPgvL%2B82gXLL2pbLCAHKn%2Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b19e856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415072,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterBold4.000;git-a52131595;RSMS;Inter-BoldInter BoldVe","md5":"8f2869a84ad71f156a17bb66611ebe22","sha1":"0325b9b3992fa2fdc9c715730a33135696c68a39","sha256":"0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1","sha512":"3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834","ssdeep":"12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8","tlshash":"ff946a1bf701e70eca562c388af59bd033b9bc91791ee24b705a3a09dd971b40ad71e4","first_seen":"2024-07-29T21:54:31Z","last_seen":"2026-06-04T16:54:35.364993Z","times_seen":293,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/82dd7d6267e09cb8.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/82dd7d6267e09cb8.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"bdca-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQZCPEJ1ZhcOBLHbfiwSyzKgboeU4j%2FyPKfJSJVGaRjFvlZVPApOD1WqJkjgTlyvbmypt8Tj4u77b1uCHvzxHSkEkwYqKcYFb6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a7156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48586,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48223)","md5":"f8c4246d22a1a06a7f417da630df5915","sha1":"9df9c9183bc1b5f82cd24ea69b7e25a5af00f7de","sha256":"853c2c482fcd17d31f8ed4788c289e260c3da301ce12fc9bf6ba190e61e512fe","sha512":"e5b56350b103b601538c2762ecb1a05102c648b66436ccf600010f6a699bbcce8ba8498a84c30a9f3cacd1637c21100d92e574d9d960c8e040936eee9261924c","ssdeep":"768:HT3NPN5/4OYWH7pyZpRATNxU2nwSre084SlFO1V+mtmlCg3v9aCjUeVhWqMDPSRn:z3NPN5/4OYQkz2To2nwSrex8jm3v9aCv","tlshash":"3023c660b14171762a4343e4442e03096f3e79b4678c546bb7ac9de71e62cca4a7ffb2","first_seen":"2026-01-31T21:08:57.230118Z","last_seen":"2026-02-19T17:02:28.742744Z","times_seen":71,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/39b6de55b9371bf3.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/39b6de55b9371bf3.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"8533-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6OMbGyYXy%2F%2Bfqn3SxnrLmAOBTMlbQzoLlldkNGdtrxBkYjAoZ8xDxXorgrWi%2BnWYJcu5yU0cj%2BloW8QreCyry74zypTci2KRNw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbaed56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34099,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33742)","md5":"7e2dc4e87b73f4b6aab56debbfebf935","sha1":"a834e2263922aaa560d0191e13557ca7aa738bcd","sha256":"03e189bd9bbb896bc2e6bd24457db1a19881a3461921f362e3e17d024d198962","sha512":"0455ea832815815a7ab41cbb6855a12536e6eb18c9da16f650c4c005792c5b309e448f26a77ba6caf7e45b57a4e3fdd9d03cd84417abc8db3bff57970801bbc1","ssdeep":"768:dM5CSKw6XkoNCarvCYbvp1xEuiLJVgQinHTiv:dy+q4vp1xUis","tlshash":"22e2a2259550aafca93b04b5f57dd04c302dbedcce5a8b68b27abc664a514c03e42f87","first_seen":"2026-01-31T21:08:57.232883Z","last_seen":"2026-02-19T17:02:28.837927Z","times_seen":71,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-81e33161b2aa5e32-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jCx2FQlfAXil9T38ETyJVhDvM6Dibj5pfYrf7pc2JgUApnKpleG%2BE1CQEvHCDZewlU0KiEJASGOlKCh2lDbaklT4jSDqIWSWE4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745616cee256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (823)","md5":"7009b85a0156c84400de05a0c65ae0a2","sha1":"94d4f3a0e20698efd8f9949314dbba9416a1ea18","sha256":"20d25315e4998e9698bf539115c111c0d3be3b3c93ab1b7177b867f83c631dc6","sha512":"ef457d30cc5569ce24338a25c7987b8e405fa4c6c54c1614aefc2b96a126d890f41f4075aa02e422b0477d0eef01262ca6178ad7e5b7c2db6378da72bc6b71a8","ssdeep":"","tlshash":"24418d0cc8099db498c9d59971d5d7016588bf37f1b88da8e04bdca4038b03d0beab87","first_seen":"2026-02-01T20:53:37.279167Z","last_seen":"2026-02-01T20:53:37.279167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?action=register","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?action=register HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-afed0a1ce2d9c8bf-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?action=register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6T307ua2zcajCIee1eJWP2e211VjS9h0V7yuIFH8vRgRm3z%2F4wRJYeuzUHDllk9C5V1nncUMnC%2FXjUIl0fDIWn4Wo6MlPO3zy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d7f1d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (823)","md5":"7009b85a0156c84400de05a0c65ae0a2","sha1":"94d4f3a0e20698efd8f9949314dbba9416a1ea18","sha256":"20d25315e4998e9698bf539115c111c0d3be3b3c93ab1b7177b867f83c631dc6","sha512":"ef457d30cc5569ce24338a25c7987b8e405fa4c6c54c1614aefc2b96a126d890f41f4075aa02e422b0477d0eef01262ca6178ad7e5b7c2db6378da72bc6b71a8","ssdeep":"","tlshash":"24418d0cc8099db498c9d59971d5d7016588bf37f1b88da8e04bdca4038b03d0beab87","first_seen":"2026-02-01T20:53:37.279167Z","last_seen":"2026-02-01T20:53:37.279167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/providers?_rsc=j9c8a","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /providers?_rsc=j9c8a HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-98167c98c2adc28b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/providers?_rsc=j9c8a\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wN%2Fgct9A%2FD%2BnwB2aw5V82XbxsCz0F8I0%2FCnNoCKxV8tUbc0I8G%2FrJEsP5%2BTdy3%2BvJnkC1kHigVXs9%2Fy71k8iEUOfncs9E74IOKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745622dd4a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/b56bfb8753f2111d.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:01 GMT\r\netag: W/\"7175-19c1abcb648\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RO9PYCdjN%2FMcuCUrGRF%2FHiTgl%2FJ%2B%2F1SC0AvPawAMyOF1DWClOteCyVHe2kO6ZGSSn5FA0QZhO3Nb2pOzRUA2LX5T08sb1JCKhGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456230d8c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29045,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28688)","md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/09bcf53934cf48b9.css","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/09bcf53934cf48b9.css HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"93-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwVHmiBV2yh2pLnFPR1I0V0CU1lax%2Bgax1ku9bpDk7uw365ZaUCTqhBmEFJUPqLTSMHDZg%2Ffs2%2B%2F0rLcF1OMtmtmCqIqU6FPp5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74560b3a1b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"4f335c221d5e283df96fc6b4a2e8775c","sha1":"44169cf280b27a325f85cb86c9c79f26ea4807cc","sha256":"75151e853588fa94ddadf82b7e4442554a7cfb03eb34dd45896004ffc7ea5c9f","sha512":"7683594dc8582aeb0af1fc6105d9c25c31638dce4a62cc3ef14f140bf1e4ffad6ee7b0aab3b4c613f05a575d384acf404af28b75679a66a5dcb41773640dd3cd","ssdeep":"","tlshash":"e2c002cc938927120487a6d23aa0e5e1c13ef1c1bab984cd21a9754ac3466550186646","first_seen":"2025-11-23T22:59:50.462528Z","last_seen":"2026-02-19T17:02:28.669617Z","times_seen":75,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/d46c8391d5bdfe55.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/d46c8391d5bdfe55.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"77ec-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXySguUJWur%2FM6l3ceZixdlBnOLaOQ7xNqPiBM209scHPkt3UQmuyMAQA%2BBwDu7uRNvBrzv6YpuSNC1Op6JKAUrfT5JJ3Rw8G0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30700,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30341)","md5":"faa78fe4fb496d7d7e8e0291756cc1f3","sha1":"6bcdf2e14f91b5fee8d295edb9851320adfa4a5b","sha256":"ed4ffbc69e75f48ff9d13860973a024f747da39bfc52be9986bf425f80ee53be","sha512":"71425d412f0ab946f12fad31d78cc15dc986bebb3087ef3c8c99a5c4b63dfeb2518c28c878c89596f5f384ec5c4a094c97a3d5214610651a882d45a4d9f1c3a3","ssdeep":"384:Df58F5SF5BqXE0msKkymRd0cJ3ED79Fg/aW8qWtOPSNAatwMs:DB25SHBd0PwMIxCatwMs","tlshash":"9dd2c8b17395f9b352db86d9d03a0015f2290d3530ae28b0b394dcef368dd8991b9fa5","first_seen":"2025-12-31T07:43:06.411892Z","last_seen":"2026-04-28T01:10:54.127528Z","times_seen":185,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-wanted-dead-or-a-wild.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-wanted-dead-or-a-wild.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51918\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"cace-19baced4ad8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahZUuF3MF9HLuXkWWW%2BdT5xusvQG8TTQfZAxBaqzXppm%2FrzeXkfx8SGbrpFSl7GWD9tnhi9vYIEN6oEtW6%2FQKW4f9Kmmk8rPD0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619fb4056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"63a0d4171069632fef4dbbc0ff5289c9","sha1":"c914721b8acfa20a31137c3dc042a9b0f6579b61","sha256":"7de0d201ea99245278eb2efb45734adbc1f58de180e1ffdfb23932907f966338","sha512":"e4c8a56c4037cfe18439a8140a60ca088c4823c73b4f64d2449afeb0d0a1543afd2f721030a0fd0f75dc01cd0724dc210e5f5df0ca280ea44e5d3112cb673f39","ssdeep":"1536:BII1vIJI7viIfINcU3LnEpVn/wyOn7CLa0vOC:BI+vupW03opVnoX2aId","tlshash":"2233f221b51122a1ce720cd196d3c57adfbd215ce870f7a2eea48a6448d58297b3a14a","first_seen":"2026-01-31T21:08:57.273279Z","last_seen":"2026-02-13T04:13:07.577758Z","times_seen":36,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=1ozaa","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=1ozaa HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-9e58c4bc98244f53-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=1ozaa\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hd6wPOBgxxodber%2B6WLCLK9219bt4KqnpemvvwVowQ1Pe%2FWw8MZDxBvo9eysAPYaIm5%2F%2FIrKDL8E5sdeDcOL52t5uk9i%2BQtgnA0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bed4956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52768,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4867)","md5":"9c2b815d70b69aea81257d659977b2f1","sha1":"7dcb57492106300deae0ab6d9c0e10ddbb5a48bc","sha256":"f512da0213e2bb808f1a14cf249f5f60e44a76ff8c9624e0593c1cbc994bbf3e","sha512":"78c85692c79f1c209672f2c9c6a804d17656ad5fd4d1fc491bb3670cfb0e555f6af81e968a2cd67f7c59dd6d04d000061c38c4f58a144157ab67230671c1564e","ssdeep":"1536:tEbG4ykD84uc5+4FN+CQxDOQpKLnlxkN0a3BFug:tEb7ya89c5DFqDXd","tlshash":"2a33e765a71aedbcfc1aacac140f8335ba890db7de22ccb9d3ed9d4403490245f592d6","first_seen":"2026-02-01T20:53:37.284784Z","last_seen":"2026-02-01T20:53:37.284784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-spear-of-athena.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-spear-of-athena.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11790\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"2e0e-19baced5a78\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdBFqC8fMXRcAY0jhniI0R8zhQ4av%2FWfPoHfdvTiv4dGQ4ivs%2FA6Hhc9HFO8bgqFowT%2Fp5rpNpFCLymUTMSKcv2XEs8swRAIR7g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d2ebe56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11790,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de17e185f969e4d3a4c06bc97af9371d","sha1":"9bd0a0b594da510a4d5b3f01a72270a4219c7cf9","sha256":"f86f583e062abb720b4dbf0398f7c6aa174d58bd08444a388e63f79eb6687836","sha512":"1d498cba0b4cd8bebb1a47b7b72739da909ebca2f09427e2435b6d9308541080d158681db3ad2c2279cc2347001b68536f98bd2e8bc0970c16ebbc2c78c7a755","ssdeep":"192:wBk2dgrM3Bwt6+QmAzyKsLdzmaS/FRZ/Wh7EbSNVFbidlQ4QSi2tms9AAjGGBQ:wBv6KB+C4LqZ/WGbSNVFbXFsGodBQ","tlshash":"5532d0fd174d8a326c328baf94c743887cc5ff499aab50e185aa991471f80d7e10b197","first_seen":"2026-02-01T20:53:37.286808Z","last_seen":"2026-02-01T22:45:30.618392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/privacy?_rsc=dy6da","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /privacy?_rsc=dy6da HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a5d8a568075058d7-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=dy6da\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qz8HWej74%2Fi5OxARX7QyfjCl%2B1V3F6%2FGEpfVwKgrKyr7g683TAgKtbAP%2FPK90pxgA12r%2FVua13gPH11DoHiWKoDzBL8Fz3TiooY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561fd98856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20922,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4007)","md5":"1a926feefcb0ca3e3fb4f9ce886c8dff","sha1":"e760669815d8b12093a4513d9e095be6875b8fed","sha256":"f642f286d67466fd38119fb165d9d4ec50d5e66753b6ce7371bdc492cd95b3ea","sha512":"d0f95c951d5c56e53c0a02d3180ec1f049ba816413b56b4fe6a377b8c4e675570a0d3fc877760be79cd06c52a00fda7db6f3f3c8842645b6fd1513a9bb26477f","ssdeep":"384:ySDkxz0N5CbG6de7ROEFgWS0BAX6T64mTUo+ZGyW9t7Bf/ipfQIDUo747eGGN3Xz:Oz0Ngbfde7UEszl9faxU047eNnuPy","tlshash":"da92b62ed708a7685bab01613a1fd6b5f72d413dab62ce7a6dbc861403465342f3b3c4","first_seen":"2026-02-01T20:53:37.28857Z","last_seen":"2026-02-01T20:53:37.28857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/a7c7a8fadd85f653.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/a7c7a8fadd85f653.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"3128-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFL6z%2FE2qJYizujacL3B7B5RO7G3kUI4RPCSk3IWUngBbYVIVgbq%2B%2BYkMH%2BPmvjwOWVL8uebEvFzKGqnoqCA0B0NetSWw6yKwcs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561fe99856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12584,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12227)","md5":"6736d35e645199d0fbb2c26ff1a4c4f6","sha1":"330babe7ad7a1a008df4fbfcc4aa2022ea5216a0","sha256":"a6c5341275522eea933fa0b30bbd42b98d1d5e1cf7db03c462ec5256d35523b2","sha512":"28bed02c6ff5722134d2315615d52efb1c3a29ffa7bb4da160554f9a7433ffbfb879ce9d3c2da0d6a67a42b3ad8476e0253814cf7aa8dd3197fbf256900127e8","ssdeep":"192:GL4RE0SZ4r+zeLhVbzB44ZdLIx+7TFnRA88KlWOfSeLzt:QOr+E5ZdkxGBnRA8flWOfSeLh","tlshash":"ed42c9546154aeece5bb00d1f82f810d312f3f98c60f8870b9bca8b91a645d43b56fda","first_seen":"2026-01-31T21:08:57.356712Z","last_seen":"2026-02-19T17:02:28.855421Z","times_seen":71,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/8a9983e0eefa6ffd.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/8a9983e0eefa6ffd.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:02 GMT\r\netag: W/\"723b-19c1abcba30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oq451U4tsBrLBIlQ9H2iXbW1DgWyPsS5tb5tia0AJQxEC001QKUR0RLHq2CD7InD4Punwbkq%2B28VhJvcNsKLiKWPfT7EjVz7eYc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456230d8856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29243,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28885)","md5":"1e2778cdf6269909553d3706405b77a3","sha1":"aa1028f797111fbd2ac1fe8befbc5fc3ced497dd","sha256":"e05ee3375ac81e36ce934885bd42fd26f7873892d52da992947b6ca7ca198772","sha512":"8343355873776a7f3aa490a93a9d79e43be7527396f977f53e07ec8552e29b4fefd257638ee0c3e1e4ca1f9df0080d4bae32bf866763876a99daa0d247e9804b","ssdeep":"384:fBNKeDneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5y:5Nurxh54fVCb++n2babYVoNqfP0","tlshash":"04d23f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d47a67bce","first_seen":"2026-01-31T21:08:57.384918Z","last_seen":"2026-02-19T17:02:28.621203Z","times_seen":71,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/2c69dda28e67e57e.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/2c69dda28e67e57e.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"90b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JU3B%2Fzg2E8Y%2FywQhbU6oEbMT4uU0jkq45UvhLRhI1FtY8jkdYKpuP5Hmknn83BU3SEIVwat7w7RUTwG1VneKx0y2ORTiRQhI2Zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8aa956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1958)","md5":"33dc57bb9392fef432b1f5274e953108","sha1":"b98c3c6d5e93c3b768580b4dd7850384eaf61955","sha256":"6cfd34df21a22ff32f90c60f4b88b98523ade92b6a03432c4ba62b9b72701b97","sha512":"7020a27704c45175411e81c0bbb8b9c4d0dac262bf3cc8d29bde16361cc08e093d0ce2d6c4af51646777129a64c45a3618382b54e5bb80ae306cb53d1a92d945","ssdeep":"","tlshash":"b441a7d9a3507ab41cc82bf086730012618631bb72cb54b4c33989e0b6978d8e7e789b","first_seen":"2026-01-11T01:55:53.495242Z","last_seen":"2026-02-19T17:02:28.678451Z","times_seen":73,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/c9f15bcd9a791bc0.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/c9f15bcd9a791bc0.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"2e8c8-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TL%2FVacZSbX%2BQlh0JNDiUk3VL5QvM7bIV43BxDpQixIBKZEtaHhgQ8gi%2BG66Jz72h2LnuSIJ%2Fmq7XxF%2FdP86StvbUs6EVsf4ilWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9ac656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190664,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4de9978e77d00d8cd28e36ff13131e3e","sha1":"d3ba7372f49985df035daa52f1370b259ce034b3","sha256":"007118ad820ebb4087eda4f3427a2889e8a3fb728f84788df294b446305a9d2b","sha512":"ec0baf6adc87fb54978a75f0ac7a8be5451e8dbb6a031a8093f2f50f33d4e39711bf68487f1339120291ceb9ad6c9ae517dfa08b8162f10422dea4a1396dc717","ssdeep":"1536:WaJXdN0DtUF5R9lLviT242a/AHmPWbIsbXN3VQTWA6qp56+e7XlUMOneXKRZ54hx:j0DCdB4t4HgYbPKRT3CPT","tlshash":"4814c6b5a0616ffdfa6f04a5b02ec40cb21d1fe8c74f89a6f6bc3c6116440846ba67d5","first_seen":"2026-01-31T21:08:57.173027Z","last_seen":"2026-02-02T22:33:10.125714Z","times_seen":67,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/terms?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /terms?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-9289bb0755198502-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/terms?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxMZyUGIFInXtZiJkoCYpEmw%2FxTPBGYtLfe2gw7yGCwuOHOSttndpksTTh9rmZWtQt%2Fz4ZhxPHJ3r85JA86G%2FjCJ8nejdua4%2FjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456150cfa56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (945)","md5":"b7c535963b7f38fa1553e5cbd4f9840c","sha1":"717513e4d9e7b4c160218ecef20880371defa801","sha256":"dc8f0458c5caa9ce95c338633100d230a79a5661be3909fcf574998e1a29742b","sha512":"2ce14e7dddcfa2b6f85e4cf19b3bf01adcb046d09127568106c6b18e8f685bdad9cbf889b9695ad4d9846a56835247f8198895de6884dc68aac3b8a9668c3fbe","ssdeep":"","tlshash":"c5519e0cc9499db498c9d59961d5d7016698bf37f1b88cace04bdc60128f03d0beab87","first_seen":"2026-02-01T20:53:37.295852Z","last_seen":"2026-02-01T20:53:37.295852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/blog?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /blog?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a242fe15fc75e3b0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/blog?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDSEOyZ3ayNG13iFJnMbhuygAV8nqOV3nLXhp0D5GwSYtxRMqXHJSZ5SsCj0L3m%2FgQCDRBuuNNjlKI2ALuaMdRXMNanF6bMYpVs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456150cfb56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (943)","md5":"6d50f8928aca90c65a26afdd38c62975","sha1":"942b2dd5875992752c7d6461e731c2d1c694772a","sha256":"5472949f824d6382e9b9acc96919a6f2255d8865cfca471da57d4c54ff8b4c02","sha512":"5d260325255dc60aaf2491ab610c8605092f3f9cb21fa8d34e51c07d360485100b4e8c2148cbc2c6ba062cf51328c527bbaa973de8fff314fb6a479eaab868bb","ssdeep":"","tlshash":"6d519e0dc8499db498c9d5dd61d5d7016558bf37f1b88ca8e04bdc60128f03d0beab87","first_seen":"2026-02-01T20:53:37.297704Z","last_seen":"2026-02-01T20:53:37.297704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/web-vitals.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /ph/static/web-vitals.js?v=1.318.1 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.111.249\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/web-vitals.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:09 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697fa589-19c7\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sj97WCWc2Pw013AC15zM29Nsme5f4P33CX23zxRCsze7SX3Nx89UzkJkxGE%2B5QrMdXvSPqmNb8eW4FQ2p9xqwMxHSql45xNjFFs%3D\"}]}\r\ncf-ray: 9c7456155d5156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6559)","md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-06-08T14:19:30.205594Z","times_seen":3486,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-fist-of-destruction.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-fist-of-destruction.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36116\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:53 GMT\r\netag: W/\"8d14-19baced52a8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blv4TiDqOSYVa4qUUXNohBrtKz65%2FN07woO6BKb90LSLllBPGmQwkKemRLBdKP7QhJ4bRrHh1tnAFt7kuZmpmQvSRKCttIBvwLI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bcd1c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"061e101a0e6a9e12feba81c7aaaa6eef","sha1":"89ebed132dd8542a1cb3b5cab557da9164e0435c","sha256":"e8cb74832de1f280761e93be7d7e52e7293b6f6dcefe08ae988d68bf9363d685","sha512":"43b39c78039f08db0fcbbd0f340568b1aa5bac2c5a9af408cd1b5178545e5a5dfbbe0ffcddc3c876c9a66cdffaab54ef616f3fba2ce72d501f8f9494c6115c0c","ssdeep":"768:7wdjjYX7y8O+Xhk8ftGB6AnstnVk2xUAA4F6cl1B:sdHYrrr68ftGBpsp1A4Ll1B","tlshash":"66f2d004b3314d10dd1aa1301eeceb92e3f7a9da4fa6d1257dde854b0f48411ec9b6da","first_seen":"2026-01-31T21:08:57.290761Z","last_seen":"2026-02-13T04:13:07.637786Z","times_seen":35,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/vip?_rsc=1gw8h","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /vip?_rsc=1gw8h HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b69e4aeb5780f0b5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/vip?_rsc=1gw8h\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qfaGVvwykoMxDGW0FT8T3HKz9hHDplStStiEwaBw%2Fp54Wf5P8JhIiI82kNQxd2GsdTFx3f4ejbELvt96Z4t%2FovUkDBHClTqcn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456225c9a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18107,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (5981)","md5":"70a9f599905b297d054d559b5a049faa","sha1":"75b154c42f6e49dd57f8b135b1bde0a38948534e","sha256":"0ad4e09b315b97f8918920414c7b4c0ddd3bdeb3d93c8ee07451df343be90380","sha512":"c2badc0bf5246afce99682b3b8248975529142d0f71bad6ab8107d53dc235f0633a6bd97af624886f8c90fc75248148607055ffae93acd136dcf0a8ea8609da4","ssdeep":"192:dlnkJZV9vnkJZV9pnkJZV9FnkJZV9rKnkJZV9pnkJZV9+nkJZV99ekBdFnpYj6u7:s8KW/Kn9ekf2wKVCIJJ3Ks/","tlshash":"06820a6bc81aec640d72dd9c3c5f57b796c5c8338c344cacea6edc9c12594275baa2e0","first_seen":"2026-02-01T20:53:37.301068Z","last_seen":"2026-02-01T20:53:37.301068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/iron3.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:15.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/iron3.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5774\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:08 GMT\r\netag: W/\"168e-1930f23d9a0\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4jbVegbDRfvcqqRS0ByEhtJlm1NokEzWsebZio%2BtJJnMuPkdD5UkMWRx7hwgCF1TdT1jiqx1DCuiNfBj3%2BGK0%2FCppITGqudWsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745655ff8056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"955d2b7cae2f7491740579547434242a","sha1":"80c1b7282b04195f86c2784187f74e5b4bd6aeb0","sha256":"43a7361a8457eb511a4d802cd5adf58562b7c32540be6f82c181de383dddd104","sha512":"93c07b8cea44b602bed8c2187fed9101f5fa097c86b604053fc15b154dd8a85a420e636ec5f933aaec2f297cbf9c28f145e4e53809f03fd2dd79def36347cdd4","ssdeep":"96:tjeOf8aj8U0lC51ah89a++msiAFv5oZvW+7VJR/UijaHE4W1ArP40HxV3FRkX8py:rh8U09WD+48kvWuX9ahWQVVOs7Kz","tlshash":"e3c19f3d0a1562f009dd506f4df8692f48e8cc95fe15779655f20f696080e91532ccb1","first_seen":"2026-01-11T01:55:53.434029Z","last_seen":"2026-02-13T04:13:07.592614Z","times_seen":45,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/1b665a0afce73dad.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/1b665a0afce73dad.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"e473-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFA4vvezKWzB%2BPVrQYtSpMcxs6X4TSahWgnCqcWMJo2JWWDJtmT1LkCZEnJHDTR5KfojDQ%2FNW63N6WdHT8Wzy4nPfK9dOMmYuvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b4a3756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32244)","md5":"c2e0d2938c329e8e4e3bb947c411965e","sha1":"eb9ab849c9e0f4a8dbd455cecc450bbee2988bf1","sha256":"fa375e72bdd6a25673f1deb2341903ddb31dde73ac45085ff8146e1a750e7150","sha512":"5af91b03962f20bc171e220cc361e202255e5eaf4777430d72f2dc8780f4da664b1df6d7e8d2c8363720491dfd1b81a022437d4a1359c5f91d76b5d090e60be1","ssdeep":"1536:M7JIDwUDps7xdBmFLkjBnx01mId5iYthtVo:GIbDpsBCLkRx","tlshash":"4243d8d97392743117aa1225907e4107f7b999d0114b8028fa6dcdde3aa449ab2f3f3e","first_seen":"2026-01-31T21:08:57.240408Z","last_seen":"2026-04-28T01:10:54.143261Z","times_seen":182,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/1d8278968b92360e.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/1d8278968b92360e.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"7b35-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvmwdQcvbh8AQeYyr487MpBKBlxNmLPQQjPjXIVYbV1PCFct4g9ikp4tL44jVZLkjznpN0isHWZeyuf1hIoyZJtuSOoR2Tqmzko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbaeb56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31541,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31184)","md5":"e5179e89d99baf52797f24105189d4bc","sha1":"d974bf4950afadea4a0076927f161eac3dfeb055","sha256":"86f986e1571bf5dda53da18ac84496726aeb00b3980533fd917380d68469a8b0","sha512":"81f677899b0eed324f5f70d95aeb73d92cdc1b0ef95693949b1c8d1fe7361a51c38cc1e114a27f6877dcb966419123e99441da1d18645337bc79facb0cccce6e","ssdeep":"768:qugNIiqWiEdR9uDFyXXyRYgx5RJK+wglNjzjaSGyXOu:q5IiqVts+wgTqSGyXOu","tlshash":"ede2da817411f87a89af92efa0e60462937d7709e0088624787f9e2c772d609b157f7b","first_seen":"2026-01-11T01:55:53.487198Z","last_seen":"2026-02-19T17:02:28.609324Z","times_seen":73,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769979184876\u0026ver=1.318.1\u0026compression=base64","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /ph/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769979184876\u0026ver=1.318.1\u0026compression=base64 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncontent-type: application/x-www-form-urlencoded\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8a96b86181b3678a-0\r\nContent-Length: 277\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":277,"data":"data=eyJ0b2tlbiI6InBoY19UcEhBQW9jS3ZlRUlIVTJZZVd4S2Z5Z0RvRVY3TEMyYkNxNG1FYUQ3bHVOIiwiZGlzdGluY3RfaWQiOiIwMTljMWFmYi0wNmU5LTdiYjAtYjEzYy03NjhjMTg2ZmI1ZGIiLCJncm91cHMiOnt9LCJwZXJzb25fcHJvcGVydGllcyI6e30sIiRkZXZpY2VfaWQiOiIwMTljMWFmYi0wNmU5LTdiYjAtYjEzYy03NjhjMTg2ZmI1ZGIifQ%3D%3D"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7Eb2bqA7I1o%2FHS%2BbUdAi7erkAZyyw3L4Vqx3%2BvNX0QkAGEbtg8mVt3A%2FO8BUDxp6JGQwXzoDr4ROOUFvAqhKTfcPIQCeHtqrmk%3D\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%7D\r\ndnt: 1\r\norigin: https://zeroxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8a96b86181b3678a-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.117\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769979184876\u0026ver=1.318.1\u0026compression=base64\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://zeroxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 34\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c74561188fc56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a7a1effba0d8f9194a89652a2abe482","sha1":"fe454b2d9ff3c52a9ec7070fa3ab8c8be7b4050c","sha256":"c6cf5bffb39b455c70d8b9652f20140ac0e7e84641bc10017953a0e2666d9536","sha512":"1be8141b960d735ef36ed97fe4b89759927e34138b1375dabfe079aca32b022a9cbca4eec045661ab49261d924617bd186e70efa7e1e627cf2bbf3b91041c44e","ssdeep":"","tlshash":"bd21c13aed206977944ec3509ce9fe014fbe133712245c04d8894a7813e72f9ba57c27","first_seen":"2026-02-01T20:53:37.304649Z","last_seen":"2026-02-01T20:53:37.304649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=lnppp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=lnppp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-81269f97a3d025d5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=lnppp\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RtU9AtE41cl5p%2FkOSgV%2FP%2F8X0cttjKCw66oUpm7wYSO22S4%2Fp6cbjhnF301NuYWxUOIF3WF27L0GcRw6K%2BB89tdO9CqnBMH%2FAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bed4556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79141,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (30881)","md5":"304082e2f38c7158713ec8a3555d8d39","sha1":"2f985854bc9c3f22853a7ac426d613aec305d133","sha256":"d09805bf43a956b9c52efb4e946b1cfc8046fd86d13d01f44327a89cf51fe84d","sha512":"8d88de206945f0ca341663bd39432a4864d657a6c574cdc5d4a6783d774939c1785455500fe325e9c75ae2543ad653083311046a26c5c3d4f108d9eeae2cfe33","ssdeep":"1536:qIqaSjKQqlrFsQatbmhAzKGlFRON5TXqV80myf:q5qlrFsHbmKKGlFRW57qV80m0","tlshash":"9f732c1bc80efc680d66de9c3c5f1b7796d9c87399304c9cea9eccac01595279baa1d0","first_seen":"2026-02-01T20:53:37.30586Z","last_seen":"2026-02-01T20:53:37.30586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-stormborn.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-stormborn.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36850\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:09 GMT\r\netag: W/\"8ff2-19baced9128\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkpbI2sNlTZWqJHrlBYI30NBoh%2FmT%2BW2LY9PhmyW9R%2B6KLvVy9ybYp63j8%2FXiLRB5DUKvMTnACQjEruZR517jWMgqrYitVD2sp8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3edb56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1636ebe90303bf58eacc475a7cca50d3","sha1":"96e6589f1474ae941ba5e646172452e4b4849cd3","sha256":"6917f2cd24802ceb1e0e3c359872f662b553a8a3f2e1e0bd116f161c5aeac86c","sha512":"34edcc542d3158a084dc3749e583051e9455b62ea37d4a656bf8b792f47816ae059cc3b8a747b3ecd26f0ee7faba1e269011303f8524b5af77aa92da024414e3","ssdeep":"768:aWtgUEtpz0sY2fGoucz0Ev6a31zS4AYflboGW+gvlaDKAEuVNy:cUhKucz0m5jhf+KDKAEMNy","tlshash":"adf2f1ce4962a776f18e67e0ea25f95173b3d71d590c3c8103352d61a6c9d2308a9eb4","first_seen":"2026-02-01T20:53:37.307069Z","last_seen":"2026-02-02T03:43:51.798612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/5664bd740cac6a96.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/5664bd740cac6a96.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"12cd-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKsi%2FGJ%2BgU1hNEmCXi4wIZwhK940PY29PO8vS2ZB2vDH4J8pgGY6YExiAewABivKpv7I5XqDhVlbickHBxis991sMzr6etZfpoY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4813,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4456)","md5":"838e5b67c708c3caa4ccae2ab6eccfcd","sha1":"b2666226e6fb839315d216fb69074265386b6b8a","sha256":"3afd0a23cf42518fdca2dfc42bffe1b2c611189b89799ecbae2386434adc8e3f","sha512":"845acf9755edd329f45184ad9bccde9249a2018ea514934ae462a84992c69b4db39d636b842de7d5c71b9187c3e2fedab2b41095dadbbfeb40a683b3f9d8c76a","ssdeep":"96:p7ctuv2BtSDxfARZ0kqJFv2H43uuqoE91YTkqdYqiEAXjv2YM:oBtDRCkqJFezuwgYjlXK/","tlshash":"d0a1b6b231a0f490d16b4294c03b441eb27a2d3e609d71b493bd8cfd67e544de6a2f97","first_seen":"2026-01-31T21:08:57.248038Z","last_seen":"2026-04-28T01:10:54.184543Z","times_seen":182,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/privacy?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /privacy?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-9650094c4b6baddb-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNMH%2FbKsnB6sdYSn%2FM3jhm9vrwB4BaBrMSqDZOh1rExqB2OPbVJVDQMxd%2BpmGHaFhVOELcr3jnk0Cukdvb8BzEG0Us0nP%2FvTrXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745614fce856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (949)","md5":"42fb09a781f487dafb056aa622708d11","sha1":"55448e4d505ab3b862ffa2145d2eeadc3e14877d","sha256":"3e4a4fceb989879eb9f4021f248ca1832668fefd1d80c85c1be9e8c0efdf2f7f","sha512":"43a0b1409dff2539427a5fb6c537028afc5c99b63fe848d15c3407bf22fc90aff214f6fdc4b3f4932a2de042da49b4b3d79069fec9545202390719d1017e9349","ssdeep":"","tlshash":"47519e0dc8499db498c9d59962d5d7016598bf3bf1b89ca8e04bdc64138f03d0beab87","first_seen":"2026-02-01T20:53:37.309642Z","last_seen":"2026-02-01T20:53:37.309642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/flags/US.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1728\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:56:37 GMT\r\netag: W/\"6c0-19b7b591f88\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kJ8201x1FLOfaSw8uWC%2FCIxJ8UD7E3ctxuq3kIx4GTYUsFmEt%2Bmh1RrGCSfPLzemzmv4EOVPidwPLNpK8MVXn2QUfNkaqVCXJY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456150cff56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-06-04T16:54:35.374525Z","times_seen":82,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?type=originals\u0026_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?type=originals\u0026_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-bac770f14095522d-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=originals\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?type=originals\u0026_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6f30XsFJ38oCTsCE9h6kvml9LVavHyaRKdIL6GhyyN0S4iewiuk9e5huj%2FSypSH7MBkbuRJGaAsUrzdJMF26LdPXrlhslZl77Ug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745618187556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (823)","md5":"7009b85a0156c84400de05a0c65ae0a2","sha1":"94d4f3a0e20698efd8f9949314dbba9416a1ea18","sha256":"20d25315e4998e9698bf539115c111c0d3be3b3c93ab1b7177b867f83c631dc6","sha512":"ef457d30cc5569ce24338a25c7987b8e405fa4c6c54c1614aefc2b96a126d890f41f4075aa02e422b0477d0eef01262ca6178ad7e5b7c2db6378da72bc6b71a8","ssdeep":"","tlshash":"24418d0cc8099db498c9d59971d5d7016588bf37f1b88da8e04bdca4038b03d0beab87","first_seen":"2026-02-01T20:53:37.279167Z","last_seen":"2026-02-01T20:53:37.279167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/699d240ba76ab6e7.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"9feb-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnlRt%2BkYKb3d4bA9haX3TXiOgV3%2FJ9ZteDLFC0k8OEVU96wfejHmNlcIiaSE661PnytPb2p8u%2BWy1czscJXl2b3ui5K1Jze16w0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a5056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40582)","md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/def7cbf195df9f5a.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/def7cbf195df9f5a.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"81f6-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyLRLgMXsjgUuzSVnaSW5AazPDiIszumueF5%2BP%2F3IVglIc%2FXvwKiCmEElJrcPuVfsSToIbGzBtwTfrV%2F9WfTtW9PbYiAhQpc7DE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a5156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33270,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32913)","md5":"971912a88b8fc321b1e02c9bfdb119c8","sha1":"13a51b0bd9f9f2c32118f3d9316f40f973a5323a","sha256":"7514ca2d94bdf7565bf10f198d551a4a1b715765d20f7587aeb1591b808686c9","sha512":"bc0517c20439d8656f1c01310675031fcbc20e9b2d1ded2ab2462d47e47342d72502c75d35953d2b1079a3519a71e73ff18197b7b367a85769c427b44198fa63","ssdeep":"768:a4HG0/x/V2i4d9Im/22FljzYvX9ia9Qsm9:7mox/V2zdWm/22P3YvX9ia9Qsm9","tlshash":"8ee2d8997241b2677ae28196d83f0116f2242926140d803c76a9bcf77863dcff57be36","first_seen":"2026-01-31T21:08:57.211453Z","last_seen":"2026-02-19T17:02:28.670347Z","times_seen":71,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/5b4c38a1263b182c.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/5b4c38a1263b182c.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"14f0-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWcySKbU105g08gP%2BoFxtwbkI5%2FWDB4uIXAZCJLMMsvtCHf9ar2pu8yyH14t7JvDUWyavBvsALScSnHGaAYGX33zWyXAMKvIGiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9ac256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5003)","md5":"f8e9ec1997bd5d30fc21d00e4ead8870","sha1":"204eb1cf4545e0065728e78078f652c93127da73","sha256":"f2ad2659ebf3d8c610e1d765790329fb17c236fc2cce6bd92041802c1f8446fd","sha512":"37dba0ba6cb75187896c36a05d8ba09efc92dbcf9be03b47a1a4840378161d97b3a9fd1928ee668c4794dbda8d37a7dd72e66ded40f9180d5af18d433f199748","ssdeep":"96:GDj0znt1HChTQV4+NBBBKrTukNYx5bLOPtFffaFAbkqiWFTTGD/TMAI:aoz7HCcBQc2VFffaebkqDQw","tlshash":"98b134d4911c42bc985523a8522ad843635d10ff35bb5ea4d9afce60a2c74cce2a74db","first_seen":"2026-01-11T01:55:53.429255Z","last_seen":"2026-02-19T17:02:28.608647Z","times_seen":73,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/e/?ip=0\u0026_=1769979184959\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /ph/e/?ip=0\u0026_=1769979184959\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-951bde54998abb6f-0\r\nContent-Length: 862\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8V%2F%2FHF3pFXgBuTM6ErNSCbYm2jFrjmckxYQIBb%2FCX5%2FKNocMeqUZHpMBkKbfToRcqhTSFmz%2Fy%2FgnPvglSFfnzOi6L7WVQ9Coocw%3D\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\norigin: https://zeroxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-951bde54998abb6f-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.116\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/e/?ip=0\u0026_=1769979184959\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://zeroxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 47\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c74561219a356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T20:09:17.543635Z","times_seen":34882,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/dice.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/dice.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2390\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:14 GMT\r\netag: W/\"956-19b7abef6b0\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIZYNddoAEdAqrXMffNhwQFlDSPFhH1ybe7zdUWZOBWM%2BfY53fvH9FRW%2B3zrJdYRFdC846RMotHEyPtyNfaA1ZU1BmEkAw%2BMQLY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619bafe56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4321a3197f1ab9457ef1edc8cb638de2","sha1":"b1eccd479b3023229103fe120e8527ddc765bb7d","sha256":"26b05e23fbd6963544e3f01f738a630cb4deb0aa7bf94462805c3d95a22d95d2","sha512":"fbf76854f7d7af55aff499175825cb1cecefcbacea89da3e7dd6556e850dd7a9486a006857293641db3eeeabe5ee5102e98130fe3f16a9f62484e4c3d90e0cf1","ssdeep":"","tlshash":"53416d04d1a1d7a450eab19c4229de634ec7d491f54463403f8fbebcc92154210eeede","first_seen":"2026-01-11T01:55:53.45306Z","last_seen":"2026-02-19T17:02:28.672387Z","times_seen":73,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-temple-of-torment.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-temple-of-torment.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33050\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:09 GMT\r\netag: W/\"811a-19baced9128\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxgUpEOyXMueWHuom7op%2BZsXlNWRIprOI6WkvVEGrhCQGfUNW2GHoUo1h7CIGgmczBoQDbVQQpOt2DwjwMTr41jF5sP%2B6r%2FHz0Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd0b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8baf78e9ec23b28a9ada7c812864b595","sha1":"11de7b760c53e5c700e912542197338b81037d7c","sha256":"a6665df3dba7e5c7dd7b40ea753e4767c11c8d3055bfb4f97d40ada250168a04","sha512":"faf85989192669361413dba0e94827c271cf17805a01ec94a962dc75c2f0a24a55d7e437660edbde80b7276cba79c35045696608f770f06424f9a0e06e0d3f19","ssdeep":"768:Pdh8H/bvJHB7f5N/PbGARwy9kV1VtLd9yBQXJ2yh7j:P78fbvJHdXndMN2QXJN7j","tlshash":"bee2c0923730c800e60d35f518e64904caef1fd08be6d1ae79dc8d458f869b5ee8e94a","first_seen":"2026-01-31T21:08:57.299528Z","last_seen":"2026-02-13T04:13:07.640439Z","times_seen":35,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/iron4.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/iron4.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6046\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:12 GMT\r\netag: W/\"179e-1930f23e940\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3L2Sr5y9f2nLgthQr7Sb9mME6CLMf89AeIH7PmsFL1bO%2BsOHDWrWX3kSBu%2B5fIk0MqNgAaRxcrQjCZ2V2bhONZ2cBjhkQFPPBfE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d4ef256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6046,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18071fdd6d93c3867c5e9b0de4666bdf","sha1":"6f381136fa97c896fab9130e47121a7b2b4cf5a8","sha256":"04ea2bd8e3e05a43963ae7916cde9296323c351edf632c0ac9aa948745332177","sha512":"d0bde18fcabf6b2e92608f38ff5d8524a37d6db64ff6e0a0737e018176eca1d0e84c575f5ec617036be94a5fd5e1de6b18373d704f4641e9d0af91977ded6e94","ssdeep":"96:mK64oXmQhY2f24e5iv9H/na+vDxEwZbjUrdcZPU31HCvC/sDW/:mrpWQhY2fv2ilHHKE/idcOoq8G","tlshash":"f2c18d2292955429165273f75da9bb8eb4bda820c1d1c17b4f72681a2a0721ba01cffe","first_seen":"2026-01-31T21:13:33.383101Z","last_seen":"2026-02-13T20:55:00.730187Z","times_seen":42,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/ChilliHeat.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/ChilliHeat.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 91600\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:40 GMT\r\netag: W/\"165d0-19b7abf5c40\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5KoH24XTtg62DU5t28A%2FT8Rbb8cUyiClApQiIkklbuALRpgnr5%2BFMD9QGZBVkRU%2FGF1mL6Ir7M3RAunyO2bPZA3wVCYs%2F%2BAW%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d4ef456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 816x1092, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1beb88d76d359bc2bde5129028abb3b","sha1":"328dfad2209ab4a5d78071353d505c0803f39343","sha256":"469d6d5d65a69e952df30bc34e3f09790158df68deface5a8ce34bbfce1731fb","sha512":"c731472b2edbca82cd39cbe52c702d69ef2cb614cdfeb047ea2214bb97c3640c53f639b31b9a1c827495fd3c2b1668d638af35c9bfbb8902b5d82db7f706390e","ssdeep":"1536:ltQsIU/Wy/puLQaeaVQweN74lyLCYsNzBdxn/HdvjyC31Oh8B0+x:HSO/SheaUN7oyLyR/HZOC3Y8px","tlshash":"da93122f8845397973fccb1998678e81386a0db9c5c145026f3597e42383a867cfe5e7","first_seen":"2026-02-01T20:53:37.317275Z","last_seen":"2026-02-01T20:53:37.317275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"29144-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3lcJ1c5b35lKmcFJXwo%2FTA8D2ar4lGP%2B4y7712GY%2FwUeTkQxR%2BdvW2IXKTiQSmhcGN8w3w3BHrIncijRCJRLyo3ojMuhzkI%2FiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b3a1456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-06-08T16:25:00.975992Z","times_seen":8242,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/4b73fe5a475716f9.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/4b73fe5a475716f9.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"83ae-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVJq8RB8LtnKARZm%2B9Maan48I8wt6TRaAeoy8ux7MscE%2BDBReHXL45PecC2O7G2geo70yfXoUSujef722G6NxklHpXTTyC0KIDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33710,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33353)","md5":"d36b24fc99ee384e0689eef065597a6c","sha1":"8ef86b2640497083b9d8305d48babc41bec3284b","sha256":"c36e1856c14ed3099197c8082b210ea9ddc07a2a7ab4663c8b3e65d5e12dc125","sha512":"5513fdad3b32216d6a72ffef92b37ac87e5ae6ae430c25b3d1b926723eb66fd719678cb5bc560f1f17db468b1ecaa676b908676ab2e2dac079dbbacc7243c59e","ssdeep":"768:7ndxrGZTCyFcQvmOwaCHHZgKIGrBvnKgApILOHz2syklZ0:7ndxrGZTCyFcQvKaC9rgALOT2Xkli","tlshash":"f1e2fa947520ac75de2f4afd7089c412a7fc2120c9186861f2fe5cbe13d9ac97362b8d","first_seen":"2026-01-11T01:55:53.449721Z","last_seen":"2026-02-19T17:02:28.864329Z","times_seen":73,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-donny-dough.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-donny-dough.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30514\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"7732-19baced4ad8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQkJRvXkMY9Wz%2BDpvITwrHaeUNiG22h39FMcFFyhn3ObHYzQi8snm1aOXtSaDco%2Bu1yFFJNYHjyv7Tp%2BRn%2FiU3jEgbo%2FxRggkzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619fb4756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4171dc1a1a334314ba5bc7f0be41d58","sha1":"c187554bd131cd950d2bfe037af0fb46a16080fc","sha256":"6909f61ba82913dcd5b864b9547748fff1c16f8e083a87b2aa538156f04a15de","sha512":"569250a35f12f1be2a245beb21157bc1f5bf8caaa1f38cd4a3978e53e55b4c9e83ba678258eb6df66d9196fcb0e5646d136b3bf220d53e97d2930d628696bbed","ssdeep":"768:5hfV3g8UXWRyJ19h78pYeuoEhnt+bLjozbzuBj:XBg8UXWRy/958oowcXjoXzAj","tlshash":"2ad2f1a3b645a308e03619bd415bf46fce1e7eb2a5ccd692742cb723841d0860199def","first_seen":"2026-01-31T21:08:57.202381Z","last_seen":"2026-02-13T04:13:07.578414Z","times_seen":37,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/providers?_rsc=1ui6c","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /providers?_rsc=1ui6c HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b7785fba663ebaed-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/providers?_rsc=1ui6c\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rHZ9omOwkqyZzY0DyrAKwAV%2FSygBLt3mvfz5GP0Foq6H4OVg%2FeB%2BeCNK%2B61VyBB69o3499Oj5vTK71YXqK%2FBIzEQLbMERciK2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745622fd6656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5005,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1670)","md5":"67036c76fe3e5b20607213a9a6c9ac06","sha1":"4c912249030b5642d46cf81abaef75760786358f","sha256":"cad8279542c6774bb471c6c083d913a1eb0837a79b6bcaaf0defa6712298c196","sha512":"7d5c8ceed5c695429a83c3ea97d26c37d1d4d5146e35ddc4d16823072cfe608e42ca23dce7f187949f0eac0692e7da92842af263f48b649cbe83f9e452eb51d4","ssdeep":"96:3rnkJZVqqegCrnkJZVqqeo3eYqRemkvVKZ/L5QXqIvTM6p:bnkJZV9JqnkJZV9BBqRex9ssTM6p","tlshash":"eca1ce6bd90eed985c26cc0c2d1f5377928ac873dd344eacebaeddac05490225f9a1d0","first_seen":"2026-02-01T20:03:45.153247Z","last_seen":"2026-02-02T22:33:10.137179Z","times_seen":34,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/group/slots?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /group/slots?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-bd7459d9e80bb824-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ip3CasaBSOLt4S%2FlP%2FNV0xXyFWzt7smtfILQk9M0rUS%2Fm%2B17KennYq5oJPYNFrKk%2FFk1TY%2BQcQbaeDySQ%2F4UAM5G1Uv4NxFiuXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456230d9856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/DMSans_Medium-s.p.4f631073.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/DMSans_Medium-s.p.4f631073.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc3c-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0drL%2BJRWecQEKQ%2BfQ15WpiKrUCmknRfZrVGEVsjGD1aYNghr4sspz9myaYChZE2VqFw7d%2BQPED3yZ4nVXnvOU1p0F%2FYoXfO8UU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b19de56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56380,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"6244219cea1110e6ec49e950f070acf8","sha1":"00ea5b83c109e751b844413d32e21b7689bf786d","sha256":"32c8fe1874433bd34674ef1b58037fdb7d1b245d5844076c76c6f3a2c69d6840","sha512":"151abea1c586541b2ee6fdbffea8dc7046027b37599092acba6a6a89873501ac3cd2f459a58df5be30b677bc252b4031fc4c9b4e9b5649a30786682c28243bbe","ssdeep":"768:ejiwYeGvU7ifzsu/ma5tBMPxmMu4mjtpg9IfypSe59QQZayKRgJDE/T+:ejD7eQ8dGZm14/m059QQo1RgJDEy","tlshash":"bf435d42f7158a0dd2836ebc846383f4b777fc34fea2839b5179ab2aed490a14c11384","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-06-04T16:54:27.239727Z","times_seen":433,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/fc3bd7c39247c848.css","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/fc3bd7c39247c848.css HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"53027-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGXJzOEXc%2FpnGZoW83xV9wGfpwisPrnMwlRzRXjAHLmK3pnP31I9YJGFRf3hbuIEl2xMtOg2VZ2QxgYnwqqUy6HsGWRrmQg0pS4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b3a1856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340007,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57b3a1fc42725b3767655e2c5e1e3686","sha1":"a5f033187d6d8942dabbeb5c7bb6f7e01abc19a5","sha256":"7220b9aafafef2c5593b891b67bd48a5bafd4f4b4729eb23d098f09255d4cfc5","sha512":"e0be6e1bf967112ca7db7ace4fe5d08e7038ccdb10f0b80fe07906ced9f3458b28e8eb46f3eb9b9f8a4ca42258c0dd9091181b121122f6d0ef23c066f41c6790","ssdeep":"6144:ssaDL+pazxc/6x3jchVC8cxIwBolW+CER1NGdROr1WJWVgSBL/SZG51Ro5kJfb1L:rvRl95T","tlshash":"2974a391b119d1bb7e2ba4fda38cf8dcc108f082de764ba9f955922423d37f36961604","first_seen":"2026-01-31T21:08:57.268767Z","last_seen":"2026-02-02T23:30:02.779633Z","times_seen":75,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=17fzx","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=17fzx HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-aa52bd91f1b3363b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=17fzx\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyNfHZw4AC6F%2FCvdt4KbE7PhHkhMI4JVNdqIK%2BMjDQpgBoYA1fD9TU0LCgWx05oHffi0soggNgoqq9KEtGLigno83vv7OR1QxW4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456191a2e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"e2d75d4fb9f994f2d1bbb02faae811f1","sha1":"2ead082da29aceb47b2bc3320177119dee103a3e","sha256":"e32be8d410e2b915be60c16950587f1a3a28c9050a07d328ceca69f8b04f7061","sha512":"45daaefa9896045fc3b3a54aee40cf31e3bce9cfd38e005430de00ba3fee85feb1e3fe84929acdcd1d131d5226ab46d7dbbb87ad55461429ba87267947196d3c","ssdeep":"","tlshash":"9c61323e120aff6c6a2b054c545ec32a635d4a36f7768e76e2fd8d72034a0245b872c0","first_seen":"2026-02-01T20:03:45.187442Z","last_seen":"2026-02-02T23:30:02.775618Z","times_seen":36,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-le-pharaoh.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-le-pharaoh.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36018\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"8cb2-19baced5a78\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=97I3fDEg0mKH0KluaOfHgMalVTinZdzsYhyTr3Lb%2FGe4huSH4qpT042cwEVCgTR4njII%2BcGPo8e8HfWpatvwAq44CofgjdsgJtY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd0856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eef0ad4df3f18476c23776d6ade5b8c3","sha1":"1f4632075fffd8ce6dba2f12b74403d5fd213e8f","sha256":"0ae255fe98169778c1d73322315862e7908663d644bd85743d03c7935fdb6279","sha512":"d5db78cc4c0fde7a769c483e97d40d8a412c4b402c7e223b22b582121a8ce604f19fae102db29c9ca49590d1f541fbbeee1184dd2366144de7086e21573a54b1","ssdeep":"768:HuH2u8FlKRaPQ+UnTc4FMCtJ+i0rLHONzlufIi5unk6O31AkI:xoRaPUn+JPHONzwAigk2kI","tlshash":"e4f2f274c6950f9bd439be7ea9b08f6a209f702fd2dd1e41b4ee95085fe836080b1635","first_seen":"2026-01-31T21:08:57.362214Z","last_seen":"2026-02-13T04:13:07.605732Z","times_seen":35,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/gold4.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/gold4.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6710\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:28 GMT\r\netag: W/\"1a36-1930f2427c0\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHAstBT49by8niLzBnJI9Smbd3eL3%2BqAloF9vDSf6XzHBJ0QNiWiafoJgYAVUcOkoFIUdK60ArZ3SnekKCqb0pn%2Fj2lIpNE8%2FgQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d5efd56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2a5cae0fb3457f0270cd09d2a82f15b","sha1":"0e8bf25db65c9e926285a31c0cd7b87071089bc1","sha256":"9f86c936adba05f024d3e53f20d414af27e4ad6fdf81880ae3a143bea76c87c6","sha512":"ae41e145c7fd60642d5cafc816049b6f58fe384ddedae6971c7363f137c6cfcc7d79b3db3c1806410699d7f0208fb53cbb7c2e712d6bc360d410e3924ce307d1","ssdeep":"192:gfz5ulqV3qwIS4cEAyaaV4rIsBvtnKNCiG:gfzqqZIS4cEX9+rVK5G","tlshash":"e9d1af90ce24bf8eae444d796562d828a09422dc22fdab05d5fc17494ef029bd05683d","first_seen":"2026-01-11T01:55:53.547219Z","last_seen":"2026-02-02T22:33:10.111723Z","times_seen":40,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-7-piggies.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:15.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-7-piggies.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26638\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:10 GMT\r\netag: W/\"680e-19baced9510\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcKEuVCqnx4sZrT6%2BFYYeFQJDDeSr%2BNv90%2BApjZryu9LecoO9Gtsd%2FT4S7EjNi%2FQKK%2B%2FmdI6xywVpAj2bxJ5XkucnzaUX5P%2Ft94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456558ee456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7d549c237e016540d2701a3bba48e36e","sha1":"a6bdd7ddc099ed41db6d0dc7462c09f0d3ae01d1","sha256":"f45c12121a702caec8f3b63f7b33209a16139c9722ae9bf1c32cff4c461d8037","sha512":"484d42335fbc6094503b9e3efb5c816da768cecacf7f25a472ddf98d4d6ea83ed7ea0da576497e7728d02c9f285578ffb1662a519fa2905331d0d6ee979b7b0d","ssdeep":"768:oumCAQ6xFuWGT7varRqLEG0y52rxyuwkGHL4uzj:oumCAQZP7varRZyYrxyuwkGHLXj","tlshash":"e7c2f1d784a7ead4dbe333e7a45a0e06c753b008ea1ca5110cecf9717937c30b856659","first_seen":"2026-02-01T20:53:37.327281Z","last_seen":"2026-02-01T20:53:37.327281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1121,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/96f87de005b2d6ad.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/96f87de005b2d6ad.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"e13b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAxm5wSRs%2BEnv6va6jHRo6lL9%2FWoHXJX7zepld8l33CSA%2FelxXp0mUVvcNNs%2BsTNg76BRI9IiglLt9bGoX7SlU4pTxgA3gXciHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a7656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57659,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57302)","md5":"17eee88a9831d2853d077fe62f93ae7c","sha1":"b04fa48c468a9688c66373657e1465eaa00e7a80","sha256":"8846cbd91af5225faad20ca5ed7991bb165ad456444ba4e344461fdcba871828","sha512":"755666295f002303e0f46c2628e8f68d3de5cede59b52ab09ac12fa7b8813e130e25d90e2bd07e8a23225bcbc995b428e5631e665dcf67dd84649e4f1d6fafa8","ssdeep":"768:bVoeIOqOdU7FKN/HtE228zbG0Muf8cAyHHyhXmlgXR9DmKcxEeZD:bVo3ObU5W/NEH0MJyHShXmlCDtLeZD","tlshash":"75431999b111b87685df92eea05b14ad733daa0cc10dc118b97f9cad232c5e4b153f2e","first_seen":"2026-01-31T21:08:57.382489Z","last_seen":"2026-02-19T17:02:28.740655Z","times_seen":71,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/reviews?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /reviews?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-9c534280cf904343-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGv9MIJDt68bs%2BNzMCY4szVbwlrQ07494ydZLuWeqEznCdoEfrTnGOQcMWoO9drCx1LBp59TnHje1FFbqEz4MQyK9kJyWKEyNpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745614fce656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (949)","md5":"d10e0a4ef91bdf1bbc8f070d4dcefb1e","sha1":"6b0a0f74e6c67a556859547117ba561b914e7de7","sha256":"2ddc7e9129b4e0d973053e85c4459f6463477207928ff8e7a4f9db082c3dc96e","sha512":"e8ccc02783c2fdf94fec9361848ca61b8e2107f082cc85619a87d79ace0931da0e545668aaa0a6d8e509475288db492e0675a45f4454ff5ecfad3df42193193e","ssdeep":"","tlshash":"e6519e0dc8499db498c9d59961d5d7016598bf37f1b88ca8e04bdc64128f03d0beab87","first_seen":"2026-02-01T20:53:37.329609Z","last_seen":"2026-02-01T20:53:37.329609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-spinman.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-spinman.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12860\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:58 GMT\r\netag: W/\"323c-19baced6630\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3P0DpYJ6PMh92f1nNUiAi4m%2FgoiWUPvpdOgOtICmgCF02nj1chnlnfjCv3unHngX3uGubMXQh3iybHI%2FqH9mOvaJvClqiKJpTdI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561a0b5756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x273, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1f8686aaab475223367020ba01c943b","sha1":"4995717b96bb1c79e414c305ed023e245fab5c6d","sha256":"d3a7e67600eebc8ee7ef0e757a03fa075353d5cc055a26e7859702d1ed1d7f9e","sha512":"cbb4755da0d75a2064ad02727845bcc0d0484154d98cac0fb913e30fa39b3fa25c12c605cd0903fc79bf74dfa4c8abb36d3ee2ea6cff8dc361c2512c99e3c5e5","ssdeep":"384:qyHZ1XyxAIMOPl7ISdRdtgNkAGTZSiMYxXQ3BTJ:tyAIMO979RzgN/GT0KgxJ","tlshash":"3242d0f64caddc199f627068b4b5886101f534127e4c43f75bfb9a330eacda92098b8d","first_seen":"2026-01-31T21:08:57.33189Z","last_seen":"2026-02-13T04:13:07.700976Z","times_seen":36,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/group/slots?_rsc=1rr9a","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /group/slots?_rsc=1rr9a HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a760d21f18f71ee9-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=1rr9a\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2s7lUDomgmqrckL4X1zQyVNUdapQsdpp59ruYY8%2FFxhbQtNpYT1kx6ldRpc%2FPZK8eunfG1B5UgeKB39uLVMkMqj8OERCH5WcksQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456232dc456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-rainbow-gold.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:13.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-rainbow-gold.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32530\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:00 GMT\r\netag: W/\"7f12-19baced6e00\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okhBunnClbWxj7EJpRUCODFgY6OznXYkuecJJ68uHLhAJgjPvCe1L9%2FIEuefd4xwHcwZNiZxI92wEkl94k1WPq%2FH4xwIHDybXN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745645abb756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5134dc7bbd2687327f682267ed49f69a","sha1":"c57077d752f222dde93c52f70dfc4352ce2a2555","sha256":"6c7c8ccf2d9832b12d1cc80b24771198eea5cec7be6ccda5e612cd386137675d","sha512":"1788bdfb19b6cf310ebc1f9aecf76d295feb4828319cf80a04b492a362f0244671a562af904e684ea5478cac2b3e0ae5b0a5d2e6a3f02ec3119e1f24ce250572","ssdeep":"768:vCMgvMdUNH8kUGElq28uML/kH92Bn2u9dMoJWmOn4ZeT6CrvHInzaCdb+E73m:vCxvUxh16d/kHCsueT6ig5dJ2","tlshash":"dde2e07d3682003dd9212db4430deb96d91f9029919d6d70f8e0fabcfe2231165faa0d","first_seen":"2026-01-31T21:19:25.738817Z","last_seen":"2026-02-02T00:08:42.544816Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/be7248fa84c6d551.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/be7248fa84c6d551.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"9d3-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzLmytgctHAUWXR4rW1XwPzLZ6qdOtYG1PZKyBqdeXQHOQjpSpmtTBGg7HBUMY5KH%2B%2B0gz5zTw4p3itgCGg0qHVwm24ju2W33g0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2158)","md5":"598a7c75a166616da34d0720a50b9cf3","sha1":"35eccbe396ae1d530fb0174811f94c4a35dd1c10","sha256":"99be381c3d3f98808a540d62ec9cb7fe1797ff9e3588e5078a26d52374152fa7","sha512":"5ee7366a017183c0a2049c1735a9135a139e62ed6411726d18b9edce9ce57e7d27bf5fe1b8ce6f915773d1d20e0c0a9cfa9ee383dda62d3a65043daafe744328","ssdeep":"","tlshash":"5651a5413444b164353629a8a0bf000e766e1b75834cbe3296fd74fd262189cdb676ef","first_seen":"2026-01-31T21:08:57.246674Z","last_seen":"2026-04-28T01:10:54.169753Z","times_seen":182,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/4c6af75a4d489639.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/4c6af75a4d489639.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"d7a-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOx%2BD9rqFT8GPojXtEQalcLwZ4d9mmgIVH9NUs8N7RSWZNe1umi56%2Br9GA%2F2UDdUD2ck0J8mdnz%2BLp%2FGDGGp3dxob9NFZhVe188%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8aa156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3093)","md5":"c1ffd2810057714d095867acc45f47ef","sha1":"6eceedd6553cf3063278c27de1aee25bb0667c36","sha256":"9604e0e5b4711c50c013e5c92da26573dfb72ae0ec3b83cb53ed75ea761a2d4c","sha512":"d913954244730850117b7c5363093e05714597040db3655885e941baf6cf66fde9ff661a6b0d1d0c9f8397e67197b0c0b7a725e1f85142d9d8e1ece11a25efcf","ssdeep":"","tlshash":"6a6101b6239433bab4c00fa442e6702611f53a6b30cf5174dbab4588fc55ceb907a55b","first_seen":"2026-01-11T01:55:53.535061Z","last_seen":"2026-02-02T22:33:10.184641Z","times_seen":69,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/d9025b4f6a92ee7a.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"92e-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhld56TBhI1KoRT47GnaYt79ZYnqvnqYIVJCVZAx%2FvEzvlFZPe1LogrrmQKzZHu3yvCQR2vrhIPgxr4o3UyMLVz9zHpLZsMtKrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561168d356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2350,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1993)","md5":"a659a4b0e579811bc5023929ba4844ab","sha1":"d22f81bf0900edcbd60abf802263d8ec80c8f5ca","sha256":"912749bf60af5412f1089a97b3ab5bd639378d17917765c0b01537e8cc49a753","sha512":"4916005e5e2a0b57b360240aecdc5909c87c486e19a985f79ba95011c4cfb1bea15601a4944e22754114b24ba7cfbaec9867fdf3126f28dbf91aba0abdba790e","ssdeep":"","tlshash":"044154e1b671563b23b8059cf2359712b7a7883b810e05b0f15e882d19ec8d9929fb86","first_seen":"2025-11-23T22:59:50.452286Z","last_seen":"2026-05-03T15:31:16.590641Z","times_seen":189,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/games/home?priority=hacksaw","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/games/home?priority=hacksaw HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b0799221af6683e1-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"327c-gcFWS0hm+fvwCeKn4Lj2Hbke6lM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzjY7ngRRpdHfPGUtsRP%2Fewe1QsD24np3YUKq4xgRwr6oTPZKJQ2dm6hO208HCd80lkIz8BDUOJmNNloow66tn%2BszG2HTAK%2F3Vg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7456156d6856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12924,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f39c92a6ae8f2533c9614b46b524d6fe","sha1":"81c1564b4866f9fbf009e2a7e0b8f61db91eea53","sha256":"ade28fd779d63605ed0a2b8167344d95e87f985ba858156410e028548ed69db6","sha512":"7452a4ec5e4a0d0f20d84343490134db51ffccf53295d245ea983f103391f8a847b74dfac97d8c662e865a370daf2e9ea4ea30ac06207464b9992a6324512af0","ssdeep":"192:A8m6w8qSDSz2jAiD9MunJANd9Ef8JmxEPv7a29G71GDu4AhiEIT8rj8:+/Y710siCw","tlshash":"3b42bfbac4a14ce9930f2f0164c72d0ef4bd2a2330c81ca97919ee78e56dd97e51725b","first_seen":"2026-01-31T21:08:57.359105Z","last_seen":"2026-02-02T21:49:52.856279Z","times_seen":34,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":594,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-pizza-pizza-pizza.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-pizza-pizza-pizza.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34416\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:10 GMT\r\netag: W/\"8670-19baced9510\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aeYhfd%2BAH6vKQcn8entm%2FhxdF4vB1i2McnJsI5nEqj%2Fnm1ca9e0sqpyuAQGz9spcBzr%2FERLjZZorodN1cG41lLIYV6EykBk1wqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d4ef056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a9fc26bd5ab6695a4cbb2618f89787bf","sha1":"184d1598d4703009102570b0fe5d12fe5e271d0e","sha256":"b9702dcfb1da7c5193a0e081ca7785b5f5219184990e88919419cce1eead2218","sha512":"18cebe01b32345973ac8c6747d0747c81b8b8910cca6d4c6ee664377ad7225107bd0ddb6f81a96adaa06a6786604af6466d8e6a9b74ab51c61a7fd80d49fb33e","ssdeep":"768:/zSbcLLy81wqwS7VUJM/miPxMiH3uLnEX2lqz0/ukwGqzqy/taDkrl:/CWLySwdazPxMiH3mnxYY/ukwWg","tlshash":"b2f2f2bfb400b212616afb07d2986270501008dc2bdece65355758864bbdbf69f23be6","first_seen":"2026-02-01T16:59:57.287143Z","last_seen":"2026-02-01T20:53:37.335504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/reviews?_rsc=7nozy","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /reviews?_rsc=7nozy HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8bcf8f8fcf66709e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=7nozy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdlhepsLCw88C3N5VABtP%2BCt7llOwN3408L%2FifusyPrsDNG81GY1mRQa6cFDAKH6gXE7bQAR5OPD3XLLJ7EidmR7%2B1AdYfFwPrM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561e280456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Roboto_Medium-s.p.caaade52.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Roboto_Medium-s.p.caaade52.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"292c4-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpwG0Gv36Ih9fYwmLPd61e7SJlJSJ%2B4vcdc0A%2FufQUxwHrsuowxy5%2Bdeb9bsA5NP6dp4zhJWkaoShAXgMKxusryk2hJy1Bqy%2FFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b3a0e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-06-08T12:52:08.368462Z","times_seen":1892,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/438b3221d8ed98ae.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/438b3221d8ed98ae.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"176b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeHoPqW3Mao0knXmr2oGnGglv%2BpkbTGZJhL07IN4V9olOkqt%2B%2BnEby4bXxVf5KE7OMobMFaHRoLMBpg9wLWTYRkQm6VMzjG6%2FHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8a7e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5638)","md5":"776e994809ee498e36929c1369e977ae","sha1":"bb87b2a8cad358a2b6b54008384ada9992d775f6","sha256":"d7ed199cabbda4d46f786e339ce99c16a7127aefad702bfc2e779527413fd749","sha512":"505e54da0c580cb4f6d9b2143e1d83e793f10296d84465dcba72442c15ba4bb2fef4385bf203f10566f6f2c935c91faf721172b36cec84945fdfd717b3ed9df1","ssdeep":"96:fWKeBCnhISV+FdytrbbUp+nOliRqCWj8HpQd4roafQBoabmj88p+qjFfww2R+Rg:fW03V+Fdwbi+OMLWjwdlpli9R+Rg","tlshash":"07c166e7b7c433a1904d437052237112b2be39bf33cfd9a58aac85c4595d84ca62fd8a","first_seen":"2026-01-31T21:08:57.243873Z","last_seen":"2026-02-19T17:02:28.633034Z","times_seen":71,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/75ff833e87438807.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/75ff833e87438807.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"25f4-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2Z7eeAsRraJJoSScC3e5SiSkWRywx36%2BC0ZflfoTS4DqJJZRYL1zwaTMb5LgW2P1DhTTXzVC3YRvXE%2B7%2BmQmIdO1gSVZp7QDHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b8aa756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9716,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9359)","md5":"59109722d30768ce9fba15afdeeca226","sha1":"a26518ebc95101c364cc8a9ff07f5d0f9e6e2a38","sha256":"c08ded8f72c595eae08a2471266cc35e1e9a8a0ea67a8f7faa4a19a6af15d662","sha512":"f85734e896da6467182958b85d3520c89137ec0a619145f5463e8227e018038412bcee216ff1cda9b2600155a91aa26dd5c2a868e0d4ad9578d7e7c5c061329b","ssdeep":"192:Qw1Z0+ej0y+9HYgN7V98SLnm4tpQrWASL:QmZ0+ej0ymT/8STm+Gy","tlshash":"a7123124e2bc513d689502e495274023279e817f738b517ac99ecab0b68787cd793cea","first_seen":"2026-01-31T21:08:57.270105Z","last_seen":"2026-02-19T17:02:28.738687Z","times_seen":94,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wnoiovg","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wnoiovg HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-adc4f743652dabc9-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6h%2BWRUkcd0MgRrGHD74gSf3ECoJSqCW8%2F9AboU2l3ZifQs94xMLxjeesOCxahktV%2BwU%2FNTh0i%2BDgEfo4wa0NPQiyoHGYSVTjHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74561178e756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ec1aa04187082ff85b4c2025a3d94a7f","sha1":"f2d6a29e2bc6c749f9b674432b0a549f7af5876a","sha256":"b597850b852f2dbc44e103e6f3a4f47c858ec1c852a718351e1c8dfce6ddac80","sha512":"69604cbee95976af3e745a83cd12325ec4298208711a6dda0d0e31fc9ce8fb13b3e959effc045b34b3ef889be6fefc0e11495500f2978024e283df7cbceccd77","ssdeep":"","tlshash":"0fb09bc4455d56c5fd3076c075f7a90955547c5e55c5845d21140444494b510502273b","first_seen":"2026-02-01T20:53:37.34067Z","last_seen":"2026-02-01T20:53:37.34067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"65118-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qft49KKUBgTgxSX3zo5zFz4HEgGgpvuoKAvq0mpHv0QGfNfITLouuPhQhHAfwN%2FmrFE3tDw5baTRiuitYnopnZdkia6wPWZAfQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b2a0256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413976,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter SemiBoldRegular4.000;git-a52131595;RSMS;Inter-Semi","md5":"4d24f378e7f8656a5bccb128265a6c3d","sha1":"d48310d2f04c57af1bce0851e053be7b58b25dca","sha256":"0dc98e8aa59585394880f25ab89e6d915ad5134522e961b046ca51fad3a18255","sha512":"38b18d9786046633e4992308c88f11ca5ced325f805eb29b3000533459e85dfb6cd87655f1e285af8da22ac04722ab354dbda24667297b56cca824ef227373f1","ssdeep":"12288:SMPc0C2wQtzPziKFfAi2bNru42U5CB1c8:5hiK9AiENr/2UYc8","tlshash":"f9946b17e705d71ecd1a2d348af58bd033b9bc90b91ee24bb05a3a09dd971f00a9b5e1","first_seen":"2024-06-16T04:57:18Z","last_seen":"2026-06-04T16:54:27.208445Z","times_seen":244,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/48f61cc265d47694.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/48f61cc265d47694.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"ac9c-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jO3vuJKt02GuZmV3AxKJQt8JarQEGAT05XOUrJWN%2Bk%2BjaAlJ9RhfD4ImDJN8VREPsgzt1NbdgvF2S7EV4XScbMEEEtWMn5C7QKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a5856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44188,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16970)","md5":"dee46bcb482bf82bd4c1029f187c68ee","sha1":"d7cf4d6188a9313e31590dacf5902ec8b1f1b311","sha256":"1943b9c626e8cf07bb3fc5f19f03effe59f3be189438303a477919db148bfc7f","sha512":"ac80a472ed1005853052a9817975646693f125531cb9f9d5ce6d69b490caa8c18bc06077c18d1ef30fd5b71d39b97c7fcec9559537c9f12ecd8c6e972743b9a0","ssdeep":"768:UjLnQztxulYXI6KJxcoQNLE5k96UJGSgf5djPZ+a:aLQYcNLGk96UJGSgf5djPZ3","tlshash":"d9130959b021ecbb223bc1fc906e1416b26d5d79e31a6a24f3ff896c131494531a3fa9","first_seen":"2026-01-31T21:08:57.327027Z","last_seen":"2026-02-19T17:02:28.753031Z","times_seen":71,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/e149492fd2b771c9.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/e149492fd2b771c9.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1f57-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c244XNrv7sdLILnErgjwK9tfrO9mse8DkJSkEsKS%2Bjti%2BCVahffhnS8Uh40EElaPhJ9LKKEAbLcBQl8hkSivSrUwJxA2Rv4o4sI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a7856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8023,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7666)","md5":"5a12d44809162192ba73b80f8c5d0fd3","sha1":"e293050209f77b727fffe4ee9d1e7371ae845b70","sha256":"ef08e4d8e1f121873218f8b632fdb4314da0c291d34f5d2772c01dec8a24bd09","sha512":"3bb9845b4093a49bc074853bdea0a895746e2451f8d236f40f0c96c103fdfd929e79525719bcea7bb997c7fd3ffbf1c3a2875fe3bfcf6b7f37a60eaffc92de55","ssdeep":"192:/vmIwuHfoWLfIaN6igj74xSkZiHV/ZoOR:/rHfbLfF0j7tICZb","tlshash":"20f1a5c613a4528cd4c64658ef739850731fa47f7aeed5d08a8ecba4b58b8c4f603859","first_seen":"2026-01-31T21:08:57.304794Z","last_seen":"2026-02-19T17:02:28.859329Z","times_seen":71,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/0645c0b51de69014.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/0645c0b51de69014.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"22b26-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JllOY6X9pDFi%2BrVxjlJkdD471xzX36FYg2IuIk7gxpsphb56vv91ZunpnWLFPBqwFUqWCsdqyBEzlbG9AwC0S3lJSpkDhtpDrHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9ace56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142118,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47084)","md5":"9d45e69fbb44e738a07585f4a0e2cabe","sha1":"f8c9b2b7850b1007e4a64aefc1ea360954543a67","sha256":"0d3e866fc5f535bccc02dfbc1d9f5e717a06924bb1e2b7b7a97ea0b61c4a4006","sha512":"3c2a7ee5db4ae2941ec7ad4fff26f5672244af08fa839e54fd6efa302c1e5b43978de353aa5bcf3c96e9a0e8e5c8a2a693d962aa7f8cbc07b46435e5a2098986","ssdeep":"1536:6ofZm0sIEZ/gaCN2wIXdauLdKeyI+9DMvOEle10XsDJ+G6H4zJDVlDJKkTaVQcGC:QoN2wINauJXTT4z3KkLoN","tlshash":"1dd35be57140b5f85b6b42e1e47f8208b23d2978940e4468f3b92cfd22158dd71abfa7","first_seen":"2026-01-31T21:08:57.271535Z","last_seen":"2026-02-02T22:33:10.215161Z","times_seen":67,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/3465237cc8e84745.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/3465237cc8e84745.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"ba7-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3azwsK6xq%2BdPH%2F1pxxvaXbFss51JBhbWJsAWGHaneSZF6BTCOtplcTQG0%2BVJtz%2FPTK5LsoR4ZSYxsfqgSnC89j9d0C5gA4lzkEg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbae156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2983,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2626)","md5":"cc39cb431a244f75298698659afec399","sha1":"88501cb3d254828dc153ff1c2af7dfc69c4ce899","sha256":"38ea9a18386586235e62c34bd4ab179c7ce02c5adf8ee2508ce39d9be127dcc2","sha512":"120270598777cc4593a0da34f67359cdb620773654691dfc116e7613bc04e408c107c3bbfb50daeeb50e71239b5bc09e285b12d8b4164e909c328d734d6ef667","ssdeep":"","tlshash":"c5510f947251daecf52b00fce13e401e225c2ea1831e4a79f6bc7db41a104f46e89bce","first_seen":"2026-01-31T21:08:57.364366Z","last_seen":"2026-02-02T22:33:10.133647Z","times_seen":67,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/c581bdd7dbf758a8.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/c581bdd7dbf758a8.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"9f6-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6acA406bG9sz3uYtAFV1Obq%2BLAqj3ceVwCeyfCREacitvoNefYpj55Y3w8N%2FePxIR1upf2SMdQIiGdTFQtTuFU41PZ6MOqilps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbae356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2550,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2193)","md5":"9ba2df7dfa4c1e2e0ca7d8cc1e50c03a","sha1":"2f3772527d36b0f944eb7cfa65be65550d061adb","sha256":"9100e90e66e36e7fe0b6f0729980db3e04d2aba354215302085d03cf81903a89","sha512":"c5363fa9dd717d7d4031f0a7fe9c223bb416331d80bf45e573c28c3ef32f6b30e64427b3fd8b6031d039ba27503cda28c231b5e75d42283ac3c033c699d02c43","ssdeep":"","tlshash":"e95176543054776a25361675f02f0119b36e8a75031c6a62e5ac34fd35218e8db5bfcb","first_seen":"2026-01-31T21:08:57.231593Z","last_seen":"2026-02-19T17:02:28.722851Z","times_seen":71,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-odds-on-winner.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-odds-on-winner.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30496\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:01 GMT\r\netag: W/\"7720-19baced71e8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EG31cPAp4QwoqyhCF5WwZZW6WK%2Bu9IB5M4PYBESqqm5ZF8socosBXk7G0ECslND0Y5rxnqdZRbvgC6Av82VazwUQWzewqi10uVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d2eb056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6557254797bf3fd46fb05108ad160364","sha1":"7951ac5756260b886e843e6942f4b5f6fc93acd8","sha256":"187f28668eef7f4707036340847e66e5b8faabe6e8011a23c06a401145ca241f","sha512":"0507546cbf6e941344aa1cc92026ca27793306eeeb37409b30f285c9631d3316f886e4f74c2c5bde68fe7f6ae05fd2587155b021b93135ab77f9f0cd27283d70","ssdeep":"768:vFAaVsChNeyhJxBH38KX/+YEpUD1EgzNXZmiG+Lljuj:rreSdXnS2BZlB5aj","tlshash":"94d2e1127b71eef315190057f0ed6a8ff26a9c26430ad52577f1d5b08b1a18ffda8811","first_seen":"2026-02-01T20:53:37.368469Z","last_seen":"2026-02-01T20:53:37.368469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/platinum3.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/platinum3.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5966\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:42 GMT\r\netag: W/\"174e-1930f245e70\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnfSp8Rj1iSq4B9HWuaTS9nInasLlmc7onDhrhjq6lEXWUO9VpgantQIxht%2FmU9hPyEiZLhMASOFcc%2BVZjTTTldFVJxyawQMO1c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d2eb256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2c86c0f03f99176fbecc9cd4385957d","sha1":"3cad9a6ad60de77081e4262fab65116dd5e2eb6b","sha256":"40398e35501f3d1fe1bb67d3f041554af47cee1992e09348684366c2ac77afed","sha512":"3dba5a749ed27cf3e306d827ff1aeaef44b5a8a9fdda8c64f8b4e2908897d2ebdce614f7c6fd5ab671b21af5e00bc3287e9496828298d3bca351d4ba728a3b46","ssdeep":"96:d0RqdQalOrDJ/aw7j1+j+IUIyKM3aRf5NVy8me+AsOHcKFkdzIiVw1wAS1s6Dsdu:dsqB4N+EIy/a1vCJAsO5F6zGyAksosL+","tlshash":"22c17d3575dcc85d6844cc76b182cffa15767280b5a7302dc5e0ba398d2498b639d4e3","first_seen":"2026-01-11T02:03:05.524332Z","last_seen":"2026-02-19T17:02:28.716307Z","times_seen":36,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/turbopack-6ee26e047f7ee00d.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-6ee26e047f7ee00d.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:02 GMT\r\netag: W/\"29b8-19c1abcba30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4i642j5bhW8TIgA1oHJ8SHxkYhOZ9rPycpdUtvJ6lp5b4vf8DW9eOqrgbZT4ikqTLfnTOCOv7PjatsX9wbH1GK5d2ItNwIea7a4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a3f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6484)","md5":"b6b5b2e80a23c95aa5190c9fa05e7355","sha1":"876299aaa2a3feb741115dd1962580e7c343e905","sha256":"749012b61c5905067dbcdcfd75aaff565a61888df8f23319a9c2a249383b5aa9","sha512":"bdab1b321b5b551c66f7bc68b1264b62dcdf4ec75f066934487edc32c99aaa66ff2941603a2515a089f8c60becdf493ac753db8d7e46a500e063f6454169f2e7","ssdeep":"192:lspVl08YEsUnUj5E4dn2Npl/daXMh6lW9xocxkUk1MsI:lspVv40bl/A1UroQl","tlshash":"3b22c6da33b6f073436fa5e6807f0040f17944b9145d542893aca8fa38794ae46e7f67","first_seen":"2026-02-01T20:03:45.099931Z","last_seen":"2026-02-07T15:13:58.763248Z","times_seen":37,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/0fb6e476b35fdb91.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/0fb6e476b35fdb91.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"194a-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Gzsqg8m%2Bi%2B2qU5kF5xLAqjHAx2iOcukOHh51Dhv4KsGtPRQWH8TnhYSltD4JvIie5hAfjX730FmTOzU4zgEzsbjWYRvVkZPQm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9acb56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6117)","md5":"7554b29439c8f6c37345f5192cd3871c","sha1":"bad5b7974f486e1debe58b943058dcad206e9221","sha256":"ae0a6792e3ffba66ba1135d0bd193e8aab8347dc08da8bf813493dfd4c44b72a","sha512":"96c92e55b11be41234180b57ea457a71dabab8989577957af040ef79589916d3a7a7354f859b5aaf83fcb425ef10d040af7a581109b76fd0546ba1da7d54e6c7","ssdeep":"192:geZektmofqE26khTOJsn+aJ8c4Vpc/n1dWd:geZektmofhhkhTOJsn+s8c4Dcf1Ed","tlshash":"63d1e145e6581361b88802305667f01391ee367f30cf94a8875a86e4e7d699cee238ff","first_seen":"2026-01-31T21:08:57.315419Z","last_seen":"2026-02-19T17:02:28.614782Z","times_seen":94,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/6ad96a8ea39e5f61.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/6ad96a8ea39e5f61.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"8013-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3Fzuf3bEpGLfla9FO7J3qeD4hzbJQh2X7Yi9CtLSGQVbq5wPD2lJ37wLR32qFmnN3EWF41Bi5VC4VmPOTpoNCFDVl1Tmn8DSWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbae556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32787,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32430)","md5":"58590522cdb7953a32a5e0ffbcc8cd6d","sha1":"ff06e9fc51e2f9be9ae55c9cc2bb9e6901283967","sha256":"bbd0a5562d046864a232012dda15a366777f9b6677b07ac7b208804f74e0324b","sha512":"4e59fefa47581048a046ce15f05cd9820f7818d5cfd0b2fabb7544ce6908ef662091769794ad31eefa189e042f99fec03a86f31eccb8e8a50e40e9f4135efaa9","ssdeep":"768:GKuzc3PXS6w5ZLpJz9tEK+nmKaSIrstfh+kG:9cc3PXSLZLp9x","tlshash":"dee2c66050557abcf56704e8b66ec40cb11e6e68cb0fcf18b5bc7c2a385a8816d96fd3","first_seen":"2026-01-31T21:08:57.328326Z","last_seen":"2026-02-19T17:02:28.658552Z","times_seen":71,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-mayan-stackways.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-mayan-stackways.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58820\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:45 GMT\r\netag: W/\"e5c4-19baced3368\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C344ZOMde34wBSk6KrY7VPuoi0PS%2Fog2UfLXTyUDSH0vG5LnRhO3oslec%2B0rrhw1lBts2FXObUvu4wKiljtBTRkLAypUGD10iaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd0556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4319e2af5007f7e5816fc39329e1c804","sha1":"faa25f00a2ca68e9dae4256e4afb9be5f453990b","sha256":"7f48a539615aa9c3ca4f4ba2dadfe8d8ce53edec0de058b673a99ee5cfdf89a2","sha512":"5730a594b4db3792b84efb657e2f87bddb1fc9a01bc8959aef9aa7ba8234bb89f40cf1f127f8e3b8d77e9360d92fbae726927f6722b626481b3f8317ce1386a3","ssdeep":"768:6CRzaBPItsHBp/Vo9Kscl2wm2CiyB07cLhjbPPGpeEO/VRgd6f2g041i+eQZz1Rm:6otXYDl2XIkNtPP3/7N2g03Ofm","tlshash":"fd43f1865b118170c6c9b77a20f49841f8ab0bf4ddb5821f7e1d8c95cbb88d94b1f786","first_seen":"2026-01-31T21:08:57.203717Z","last_seen":"2026-02-13T04:13:07.571034Z","times_seen":36,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-aladdins-treasure.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-aladdins-treasure.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27378\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:42 GMT\r\netag: W/\"6af2-19baced27b0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhllRN2REIMtKa6ZY9S3oK6GrsxZlgmkUWmv%2FrpXfBSlqtjV8AK8qEWsWWpHLdw1sADKiXWw9GlLJW9Xjs3VHKWHWQycgDtkXPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d5f0256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bf6443938527ca558ac7664d0e3f2fdf","sha1":"4a06285854e97d243d27f40fe7ce20c2338703e3","sha256":"04ac0f69a5ae04e41ff3fa6969faa4cebf6bed2d68004436decc46ed253f1615","sha512":"4cee2573201521c5eaac0f6ceb9cb4c65f8683c4289a72821ebbda7e9a97fb4100194045f26f14d0623980263892c327fca73a653217cd9d41a5d96a9865ce3d","ssdeep":"768:48KgnzqgAdSHfB3XGObIEfm7UhGfBm1Vpk5tO1EkU:4sHyiB3XZbyZgO5t4o","tlshash":"9dc2f10716de0d916d0648a93ae094e8802ca92af559c77d63d882fcf7d01d4d7f7ee8","first_seen":"2026-02-01T19:32:47.962646Z","last_seen":"2026-02-01T20:53:37.37482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/reviews?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /reviews?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-85823e57c047ca18-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A14oKi%2B3906kHPKdVwH3XyeXg5IPjQhvi4MXM0jqUvQkwGHLFCzGX%2BUYJkaypa1vmhgyKA1awKJIh5mrS15qw5JEfs9e5YfnaSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d6f1856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/terms?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /terms?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a8255961dd875375-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/terms?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsTVduIP98Zy8cFxPLwcHCHeCh3VA0p%2B7u6AvrD2%2F4UPsBvmVz7Q8rJbseOnUIbIwjXklDFcNbLt5z1iTftNi0AJw5RoKYS279M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561ff99f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/about-us?_rsc=m8tll","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /about-us?_rsc=m8tll HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b9b69afafcaa2264-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/about-us?_rsc=m8tll\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVzioDgP0zmbILWOomh1W%2BN3fEPpz5qPTuN8oSR7j8nhhrq7VteTWoKkXvx9EYejTt08lGkmBTz1Bf%2B02OBx%2B6%2FCoJMbqgjbR9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456219b9756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19494,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4169)","md5":"e4fb4013e7011cbc4a756b1a771bb81e","sha1":"ef91a66d0c9402d55b0a631214f12bff7e89b58c","sha256":"fdd0ba2d6d4ebb7df4b9a0881eeaff44d1d2043f1efc14898681be552e19c15e","sha512":"aa22ed7e33ad195ef354f436751198992185352a2217b758b35a8352b29c5e9fc1a5d0c11f5a5c8bdd4da6f19ec1ae2fb177071beded1551beae602393c66cdf","ssdeep":"384:yqxkRHqJNpfMFEBgcXBqi8K9Aw2E6R80d:WqJNpfMFEBgcXBqi8K9GE6R80d","tlshash":"439203399706aeecaa7b0065142ed32ea31d8a77d796cf75e2fc9e6003460742d573c8","first_seen":"2026-02-01T20:53:37.377094Z","last_seen":"2026-02-01T20:53:37.377094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"659e4-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDmv%2BObDjq5qwlL7VyBKHdkvo%2FITQPKgt9cGLr3bVYXXYQmSwUh%2BUDrGQWFYoke8WNDoDgUucCv1rSwa%2Fa%2Bqh%2FX0ucPXiQnSE%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b19ea56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416228,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter ExtraBoldRegular4.000;git-a52131595;RSMS;Inter-Ext","md5":"5061bd7701b1b3339f0c80e69a2136e4","sha1":"4a028f1fa4dbd6b4bfbfeec4a5b5e222a005b563","sha256":"3c13487b8f2eba0a78cad4cefd19272b0f4e53d61c223e6b266ddf0b332e9f1c","sha512":"65875f9f205cd70d2e1b86fbda2ac8875637e0b3e0bb37ade9da20717b0f17d2108a0cf2aa1b246affd73bea233b510d37d13193801d94e5148d3ec4159653dc","ssdeep":"6144:3VpTx/VCC2wfBsJWPziKSQVE58IqsfnHGR4tGX5/2nHTAl84RSnj3k4yhT18:3Vp+C2wfBDPziK+4suO49lfR98","tlshash":"38946b23e706db0ecd1a1d3486f5cbd037babca1792ad24bb0593a19cc931f41aa71d5","first_seen":"2025-03-15T18:38:34.528748Z","last_seen":"2026-06-04T16:54:27.195261Z","times_seen":211,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/c99dd6f2193578ac.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/c99dd6f2193578ac.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"5e51-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzSiCYcGcnK3B%2FK7gvfwbotD4A5nRApSN5JdIhd%2BbZZyh4zZBFTUIPbskBdbsdeE7QVXKHnYVXCg2dErnuzGrCLbFSe4MyKoO%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a6556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23788)","md5":"5eabe5602d90013fa15f85a6fc6f890a","sha1":"2312e373488bdcd197a5189f2d76f272fb825fb8","sha256":"815a58522bb2f49c1bce5d54f1aec6e5c9c4fc41979d178e73397fdf65be846b","sha512":"e6d61874e6296af415a21d9c062c2657b051412569585b0aef4f2179d2d603fe640df9d8fe39b66a404d803fca621bf673ff3fe9d7ddd6cfb92a5f50852a4f6c","ssdeep":"384:N3+WOa/L3dxIv57SwaJAHTMYGeDFp3TXLvA3oLgxINGug/LecP+nZYr+gbYchU9R:IeOTMYGe5hjvN3IecGnernGmQFUM","tlshash":"92b2e9d9b361b06b53ab61da403f0405e2fea974251d096ce754d4c3b8b8ea990f7f38","first_seen":"2026-01-11T01:55:53.456823Z","last_seen":"2026-02-19T17:02:28.729415Z","times_seen":73,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/surveys.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /ph/static/surveys.js?v=1.318.1 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.71.172.82\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/surveys.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697fa58a-15b16\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IJGRBZG0kJE5ss%2FxtC0noctFEjIm24Yu9K3ZioTX1bR9mRkw7IyAoqyxccwF5CxtYq9kSm3P2G%2F6TQ7TkepHTznDacqreT0aSI%3D\"}]}\r\ncf-ray: 9c7456155d5056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88854,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-rip-city.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-rip-city.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30170\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"75da-19baced79b8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mq2oXuLdbyrVRdlRhBY5wNkML1GAE8oQYzlaoA1zDVmAtcQduh4PUy8FfhnLJTIBJSjlcAN8Xb8NSGYB3sUCheUJ0D43Jqp48r0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619fb3f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cbacaec682d5584537022ab25afac216","sha1":"a9b36ab6b46b112baee27269d09004b925505f08","sha256":"ac39fbb15e59d3070388494712f8b3b03da14fc17435a082a78577ab023e77dd","sha512":"42e75a2384bbda29005a8f96ddfe8a52136d718aa5a43d47a0970b942196c417b0202c3b0d429f2996d7c62e8e596c747d8b0463bc2fd39a3686b3e9f198c8aa","ssdeep":"768:mxup0eOHd4PsNDlvGlT9NNsNNWiDE43yJEimM:Mu2lGsNDsh/OhEph","tlshash":"c1d2e03ed7180727e3af624305785de0c1b6bd789aaaa93463ff90c071d03739a47966","first_seen":"2026-01-31T21:08:57.37226Z","last_seen":"2026-02-13T04:13:07.576918Z","times_seen":36,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-the-bowery-boys.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-the-bowery-boys.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36342\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"8df6-19baced5a78\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F07lnPOkXVIfg46tNrS8ANhW2FjLtcMiNZCbjoI0V7SBZmXvqmwUliCnii33wWxisKHFk16eakF1YZ6WR4%2Bu20YUpOXn5PHhzNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd1956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5503164d939cfb0b92e51bf0c57b4a8","sha1":"21416a7af812476851e6ce13a6aeba17c09ab8e2","sha256":"5c8cbaa580c3e8cb4f32b273026cc48a56545ca808beb5e28144a344ef87e4f3","sha512":"9459e28e0e1e0123e3ef3f3a741e15c6ec50f89d8ddfc05eb7499c0f4f65c532e14c7039b609d2133cf2b8b92b441a1c87c48c9f50201378fa7144f350e4a907","ssdeep":"768:Hbz407zDs+/6tKpbYnVLCHUJTQaVCd3oXQUE7UolAMoJhgNAAb:g07it6b8LRJpFQUEpXoJhgNAAb","tlshash":"16f2e0210361dc96dc4834b888edf476eb770f951884220afedc9a5a8ff6063cd82887","first_seen":"2026-01-31T21:08:57.171092Z","last_seen":"2026-02-13T04:13:07.638337Z","times_seen":37,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/4b5fc2a2cf150c41.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/4b5fc2a2cf150c41.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 19:45:01 GMT\r\netag: W/\"734d-19c1abcb648\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVHqvQdqBt3PygmAZSG1n77y0%2FB5O8jTG572xaXmBMyEFBFU1htZeVr2ezhY84J1543tgHFEGu6fEq5ejGvKa7Q2T7RfARSoTqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456239e6656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29517,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29160)","md5":"9a2db0f51ceee4b64dcf2f34b7cc5de1","sha1":"9d13515ac8e3613937c7e41e704ff52760ddf473","sha256":"3e316fdf81283e8d0d6e95f67225560ef3c1c3b33230192de20cd9a9516a75f0","sha512":"80ac75dc3f6084d84660a5bc6fed6ae94440a6018061ed1fd18289c226952ec56b4790a8d42dc197cb5277edb1596fe26baeea78de76d04cb07d3f621a6657ee","ssdeep":"768:PfCxyEdRqNnKG1+g3fA1SjjDrxEBK8mO2V:3GyEdR2KG1FP","tlshash":"78d2b66050457abcf56708a8ba6dc40cb11eae6cc70fcf18b57c7c253c5a9816d96f93","first_seen":"2026-01-31T21:08:57.196019Z","last_seen":"2026-02-19T17:02:28.856281Z","times_seen":71,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/i/v0/e/?ip=0\u0026_=1769979187874\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /ph/i/v0/e/?ip=0\u0026_=1769979187874\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8e1b58fdbd1560a0-0\r\nContent-Length: 1572\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyZyrPgi4XUbonG%2BFOi6lZ3Vx5sd%2F%2FO%2Bvq0okdvdOeS40%2BA%2FftURH5diuw1dNj%2Bo61C16pSJ4rWjUANJM49olSUIgKLdKZfXpCU%3D\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\norigin: https://zeroxwin.com\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8e1b58fdbd1560a0-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.222.116\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/i/v0/e/?ip=0\u0026_=1769979187874\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://zeroxwin.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 52\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7456244f4256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T20:09:17.543635Z","times_seen":34882,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/gold5.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:20.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/gold5.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8444\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:33 GMT\r\netag: W/\"20fc-1930f243b48\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7bDyRj0MIajxi3vNScN5mnIEmuh8Bwub6NazXfKuougJpE25B6pcHulpd8FTh8XG2pcdULZOd5W73fNwJ7pAADGpXRzfUhj4OM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745671dfa556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d30c6fd87e440142df0c0035f4739e9e","sha1":"255e3515bc26087ec983e5ac9be8d91fd44d680e","sha256":"ffca79506c507801d9679a4909800054fc2a58c4b39faf4e2d44d7a6b392b5cd","sha512":"c958510dd903039275c56b635f189bc601fbdecb10746a14f267a6a92d6fc1902e3fb813222a6eca9c24696e5335086d0519446b61b405bf61583c86a5e7c2d6","ssdeep":"192:ZfAHItC3jtXcxVX+0xwpcd6BxKJF2b9l38gCVqjT:G4JTTxqM67KYMnVS","tlshash":"2c02ae7a3468fc136eb624fb757ab35b7e17504e51a9518c30407e70a0289fef08e60b","first_seen":"2026-01-31T21:08:57.357724Z","last_seen":"2026-02-19T17:02:28.657164Z","times_seen":38,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/ce44054dec8673d8.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/ce44054dec8673d8.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"2a759-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ma2kDCO2NCfW4bZG0M1P6nRr2BWftu15Pus%2B%2F2gAOfxBDnmVImGFk51pcD0vMNMpBzYTvU9ifr6hCjAQvczjaHEkbOh4D%2FzR3jg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b7a7c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173913,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bde39edae3431bfd62768b8daea510","sha1":"9db768e745799c7b53bffbdb618c2263ab3557ca","sha256":"00a87cb86b607e19e592958bce89d185c75348ab44a92c12981c1b643ec1f5f3","sha512":"2da1e992c32123c7bf657c5e5a8e22f89aae2ad011483788ab2a009ffacc9a5709284f624c13cde721c732cbb1fe2337e0c40541499b51687862ff2e896ef008","ssdeep":"1536:BSUFcXpf43D/mr5hTIEdjDjJTob3UoYq06KgVH3TgTUcvJsgqzgx2/xWCSqlX3mX:BvWXpfsTzj91E2/DSqlX3ta","tlshash":"da040bdbb779d02249ed90e5d0360103e33a3b4e5548842cf25eadce359d94aa27bf36","first_seen":"2026-01-31T21:08:57.252675Z","last_seen":"2026-02-07T15:13:58.776301Z","times_seen":77,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc14-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NKQmB%2FK8feAdxiMA1ps8Etd%2BrdOZLXTloOxr5VELBqvMIb%2FNSC1gzXmQW0f8Wzx7zBP3l4R07RLgUlnMU6rVncan%2BEnaCDzqTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b19e356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56340,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"41de6d553ba4b1825e9cf023e97e2ee4","sha1":"c2c26e18339912a10d796aee9a19ce1aff5177e4","sha256":"cd4f7b027bc8e71a19360a426cd694eb195f6fad4142437047f33b312a8c4e94","sha512":"e6b614a65c7441b5a6967df47b1bac808f8966ed8b43446fe91056235b6797653999b9160172b77bc92c2db35e411a1112e97071dc1ca8ee17a7b288357c6fd4","ssdeep":"768:8sVAWXhIU7ifzsuFE55E5bBvQvbKtdE68fjBzPrloGWJ0j32v6w51:8CXV7eQWbTn8VyGWKyv6wX","tlshash":"a9434ba9b316960dd356babc946373b483b0bd3caef3c35b54b1673aed4d0a14c11289","first_seen":"2023-10-31T22:57:11Z","last_seen":"2026-06-04T16:54:27.201796Z","times_seen":287,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/b24b62029e7b77f0.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/b24b62029e7b77f0.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"620e-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1r%2BcrrjbFboSDAdx%2FAGkCQBZ85P3UU%2FY8EzRuuLGGDa1yKOD1%2BvtCKSGUtnxjc%2FSjiRyQ5QHtmJ9PaurNoZOBIEIcfVpBlXFds8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a4f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25102,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24745)","md5":"a3efa1496fb3790aa32be064c1ea58b9","sha1":"12600f977dd39b4f9ec71acdf338a52e0dce12a7","sha256":"96c4e85350af7ca6c9e95dbea100a3ea00f644aece44c0076c936e4c9f8894a9","sha512":"18140f500096bcd594c1109049ab0168549583ab1c260eba910b89ecd8d0749f2c5b7d602ad66dd153f685eadb2361e5a279ea5ec0b8da170082037711971606","ssdeep":"384:wHGENcWB9YdI5vwpLFRXkdJfWn0MfzO4uE7gj+fjK1iTCMsJ9oWuniaoJQdmAmQA:D2veRnAvfMCJ9oWuniaoJQdmAmQvSeVa","tlshash":"f6b2e8bc32117411db8710a9c0ef4d06e12e25b6220e8465b2be9caf25b5ddd50bbb7f","first_seen":"2026-01-31T21:08:57.278665Z","last_seen":"2026-02-19T17:02:28.869737Z","times_seen":71,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/2349889433227e69.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/2349889433227e69.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"10b33-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LIS5tAT1kCEwvGi9a1uIFlizXn6U7JRj6saQferLrJBrrWki694srJFktDwJ0mbdljzLrjTCva2XBEVrvaAED61ZgiCnaQvWHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b6a5456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60216)","md5":"78bce7ce7acfc3881e181f458e56e281","sha1":"31b0a2cee84238768b19d60f5bbe95073f85f927","sha256":"bb5a1ecce51f1568ea7b8136da53386bf996288fcd864ec646ba176b5b858af0","sha512":"3dcc827162e8eda233878321092245d82f2eb30c1f09cbeaaedc63426ff11efef495f99064aefcb610277b3bfb0266890fe6ebcfa75ea538d8d58f5c55f1f96c","ssdeep":"768:giSpd5w4FuUe/y1xxzgxk93gtaKoYYS221frDQUkP/M6+rueVutcc9m4V:ZYAymxktgtDDQUkP/M6+ueVuZ1V","tlshash":"dc636c63324228f65bdf42c6e02e8606e33915d6900d4124f7aa5c3a5b61fe890e7f2f","first_seen":"2026-01-11T01:55:53.41201Z","last_seen":"2026-02-19T17:02:28.846589Z","times_seen":73,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/bc00dbd968053a62.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/bc00dbd968053a62.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"107fb-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LioZBcq4YpcmLrnyM%2Fv1U%2BSjNb%2BRoeutTQuOTJ7K%2Bbr3Q2erhueAW1AU2A74hz8Nh%2Ba%2Fs31lrumc1jcEDp7RjgiN3XIEPvyQK%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9abf56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67579,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54063eb7b6a4e8845b7b5621d59393f2","sha1":"1dd66c0341da2e2046839b93e596e940817f6422","sha256":"c1bf519ba156ca7fb4bfed64075ee0b668cc32cce0f8a00f4ce720371dee3bc7","sha512":"07eb929ac5488c8b066a963b55d92a1d4146f1f6ebfc87e977e602a7faa1c8943511f3c785b04d6e0aad2e89d14d567e6d641a9cd476de66590be4d7d2248a49","ssdeep":"768:e6OHRgDFZ92YskdtAO/rx4soJY0W07sXlAa7Kht+DLN1AbgnnqD+hH:HOHRgDFZc4tAsv0h62gL39nqa1","tlshash":"bc632ae63351b462d3db5196c4ae8501a27a59e4240c083c75fdddeb3822c8962fbf7e","first_seen":"2026-01-11T01:55:53.442527Z","last_seen":"2026-02-19T17:02:28.647339Z","times_seen":73,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"zeroxwin.com/api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=2nHq17xI8ItYgnbCABmz","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=2nHq17xI8ItYgnbCABmz HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zeroxwin.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: EQ1dz1ARxGiM7/usjRWB/g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 01 Feb 2026 20:53:05 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: VGzeahiDLAAUfMy5Xhd5mRlo5wo=\r\nAccess-Control-Allow-Origin: https://zeroxwin.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Cf67rHElAXX74vJDNZYXz%2BOhl3HTyVHN5WMc6YoUauZ3%2FOiMiRw5%2BbXtEIRIbkp2v42VTz7gvxyFOHgar8NIf7Y6qaSy1agGu%2BVg533QkkeOsZGL%2FyVeyTuC2yT%2FYVw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c7456140da60b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=665\u0026min_rtt=595\u0026rtt_var=162\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116\u0026recv_bytes=1633\u0026delivery_rate=6652373\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=f5285c1e63dbc249\u0026ts=170\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":18,"connect":18,"send":0,"wait":156,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/group/slots?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /group/slots?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-95c42a3217d2b2fa-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BdAa4x7aLaqEnr2BUykg6IkG8AYrADf8NuYY6ggKA9KZ4j3dOYKJzvk8q8bU88u8n6ovr%2Bt1Xi3pVstHkt3ywrchBM4bhrWxgQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745617c81956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2575,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1066)","md5":"be281a582f01382d11b17a12570ac1c5","sha1":"c13dc98919316f284023a1cda8266d3777d4b328","sha256":"937b9990650f79887d188d7500cae8f916a96c37bdeec90a0cafe1dff2471001","sha512":"7bb45ae4c2c10167aa3eaa6c8cdc99a5a58cd9b84e0715edcf3a874412aa3eb1df08447c66999d90f8c8cf72376e9157d598f1e2c35d68e1de5f7d2e1cb5fe09","ssdeep":"","tlshash":"15519e0dc849adb498d9d4d962d5d7012694af3bf1b88ca8e44fdc64138f03d0baab87","first_seen":"2026-02-01T20:53:37.38709Z","last_seen":"2026-02-01T20:53:37.38709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-chaos-crew-2.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-chaos-crew-2.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38104\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:46 GMT\r\netag: W/\"94d8-19baced3750\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnh4HkY84mFJyfgoFssT60rdO3kSOX%2BhAESvQ5H9z4b4QFX3rMkan%2BJe9WSr5KPIgGO49RX4G27ICOC59rgV7Js8zJ2IHTuBGsU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561a0b6256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"870a45982975ab726364faf2f1c3c5c4","sha1":"07c112b5aace1ea70c6321404b004a32d5ca1a16","sha256":"6edd919c24df00ce9728b636f8a0b164e93ad310cb6aad56d55053fa6ea3c34a","sha512":"ed9c87c19441323d25b004aa9a3cc9fdc98709d8455fa4b80152a64e99fa2e1d126bdf931e7472cde5a52db1cd816b77d60d711e9ba2ea036568adb6593740a6","ssdeep":"768:FdKCxYkq+fMBeTrpfaSrgXcKEZURdAemTuIsW19G376xjHPbrwE:FdKKY/+fWMrRasgXpmURuPKJWzG376pQ","tlshash":"5e03f207c0b8390e78eabc7d2bc44f155a5e931edd4efa86b9e1b1c8817a41d59088ed","first_seen":"2026-01-31T21:08:57.166938Z","last_seen":"2026-02-13T04:13:07.64927Z","times_seen":37,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/Inter_Medium-s.p.93090983.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/Inter_Medium-s.p.93090983.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"6476c-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FD5vIj9IQi6HTu%2BMZ8IViWdXCwMITh5dwRGFTw4uhMO7fAUfI%2FIqmct7NE72qJGNyyt72D0xRIT5w%2FJaMhoQYyl%2FELpBJHhA0Wc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b29f056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411500,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter MediumRegular4.000;git-a52131595;RSMS;Inter-Medium","md5":"a473e623af12065b4b9cb8db4068fb9c","sha1":"126d31d9fbb0d742763c266a1c2ace71b106e34a","sha256":"1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146","sha512":"1fbc2841783140fe54f3ab1fa84e1ded2534bcec3549ade2f513491b32178df515bd63a0a4a2c35017a6850ff9c3a24f8602357d912acf8ca92b8d68ba846d3a","ssdeep":"6144:D0RV3jlWkDOh9oC2wuhsJWPziKSQlRiFy34YmkCD9oI0+msvMlwt5BO2x28YzWDQ:D9SxC2wuhDPziK2yIYmkCCIPmsHI8F8","tlshash":"48945a17e706db0ece562d34cbf587d033a9bc91781ad247b16a3a19ce931b40ad71e2","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-06-04T16:54:35.364241Z","times_seen":243,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/providers?_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /providers?_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-85fade87509f4ee6-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/providers?_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6vheGynqbFqEpW7iBgMMuw2AxNPU6SWVfToEW1UULg1DbYI0WeRabteA8lslfdA9pXt7w7W5akMmeGTcI1d6BRHfvh%2FeZADvBI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456173f6956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (953)","md5":"15d742c65136b490023586c54646a686","sha1":"6e099e8b4b8259d0ea3a41c92be447d5ce50c3b8","sha256":"ecacbee3585d9ee348a6cab6ab932fa46c2d84bf3d0029f1e65e9493546664e2","sha512":"dcd649e150fe1f83fc84c0da5c264de4b0d19986bf4694bdc002d91c3d0d025f51edc9630a6af0b25f50c82329fc56788ec34e195eebf99695f04301e8ecce77","ssdeep":"","tlshash":"8c51ae0dc8099db498c9d49972d5d7016588bf37f1b89ca8e04bdc64028f03d0beab87","first_seen":"2026-02-01T20:53:37.390733Z","last_seen":"2026-02-01T20:53:37.390733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/home/banner_blue.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/home/banner_blue.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 346328\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 28 Nov 2024 17:51:34 GMT\r\netag: W/\"548d8-19373e65070\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuLsh0moxrWcq4YrYLDSzuDitFw77hTM%2BeUHrLoe%2FPouqPIYoPtPzHCJs60gsNcdDOlYIzAbfo6KJkvypSjAZnlocWjC1uujI5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561afc5e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"258caeef71fa47f5e6268b4b1a0a6b03","sha1":"7d37eb51c4d5da68acce58237e7433d88ac177a1","sha256":"7cfefd291528ea7af2958e9725c412133c8e6ce380715b5e879e36306a133057","sha512":"68aeb1ec8ab4a1dd9c203b97571f263c0610d4d27da4674a7b98b85103c7a2c717a26a69057352b40edab1cee07f433803774b52e20463e638f118233d4f33e4","ssdeep":"6144:1bWZvyoqJ0Jf5KFuuBiYo+ytRpJqIU+Q13ZVAjGbq4AfuFeVizTHRykmOYVfOE/1:1SvyTJ0LKHBiLtcIPQBZVAjGbTAfuFef","tlshash":"6a742337eff90923b01d93edec8a1f81181fe8a64f15166e5ad2d65c143cd912806b9f","first_seen":"2025-03-15T18:38:34.509263Z","last_seen":"2026-02-19T17:02:28.815656Z","times_seen":80,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/home/promo1.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/home/promo1.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8944\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:32 GMT\r\netag: W/\"22f0-19b7b5d9fe0\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPsXm%2Bd83SHX4Gcwz1GVpcgFl0RLOcLmumNNenWL04ONZtPylMJya0YN6tEsliLYOljyDUM1oOT3UJ5UL8e362E7X7gczOjqt%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bacfc56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b8130a91fb4c5a77bab53ac79c0d1a4","sha1":"69d9ffa75456675f8ea57bd2e63c92c28cb9e418","sha256":"d55c522b42c801b1d691f66a300b86f5d63453f56ec6cc13eff9a4e59c680fe6","sha512":"948adc9e24f539d7318b094c262e885d65a38ea348ee8cd533c40c646be5c12adf899efb4495060dfd289687f9ce2d818474a8bcd1f055e080088348eda78575","ssdeep":"192:igWb2C6F5XTxWaehYqbPay5DmmHKMaYU2UWzqTGWAF:igWKC6HX10NbP55BRJU2UWkRW","tlshash":"c102af4fd4a89b154924b2bccae79746e00dbeb85a251f683c6cf4eef625102901cfd5","first_seen":"2026-01-11T01:55:53.489214Z","last_seen":"2026-02-19T17:02:28.760725Z","times_seen":73,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-duel-at-dawn.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-duel-at-dawn.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34038\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:47 GMT\r\netag: W/\"84f6-19baced3b38\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtlBXgI6Du6ReZHzupiYm7F7sXcy039lqX9Bt41%2BOrN67XxpoPR1cUVG%2FhVI9D7XIG%2Bu6wxDvLY3e5%2BUMeyEStzlgcjMcQK0goo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd0a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34038,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f81aa55b46f91bf48a323e72d7b1f207","sha1":"d07c2716de2f647e2a5fcd794cbb32436e571471","sha256":"8ddb824c0ddf14a00f22be640df614419ebff7cb11ec484530867e44e15ab190","sha512":"97270450f34386dc5da0d95480c0f55d129cf50408a87139dce12a6457a2be56e4834bd37e37c8cd4491d984c69eb2ff3908f4973ee67626adcd47081f39267d","ssdeep":"768:sK0PnSJncOts+g6x0vct8INoEa1+Cpx38QYPs51sXDGh1dCW7hwQP7rMWkQ:0anc+ccL+V1+Cpx0Ps5iXwTwQPXMXQ","tlshash":"23e2f17153eb6c30d44496fac09898277906c487d08efb639c0ff828e5e51bac1bb2d8","first_seen":"2026-01-31T21:08:57.226909Z","last_seen":"2026-02-13T04:13:07.630813Z","times_seen":35,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/blog?_rsc=j2t3w","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /blog?_rsc=j2t3w HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b362bbb8687c61c9-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/blog?_rsc=j2t3w\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpIkndryI7qJYrkXXZVLg%2Fz6bbS8tYKu3PUz%2BHyQBCfajx3snXYYgZ7zQ8BkhYG3GPFhSyNVjjrdcNbK0twwcWureY7iSTOmWcQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456214b3756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220375,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1621)","md5":"2bac25dea1a236da214e17ca49c6e03d","sha1":"6a67bcf04796fd0a1d8c64124b0a2c4d3be77940","sha256":"c12a3c492544e7bfe539f7fda328ddbd97600effee1e8ad20ac34cf0fb7d3c54","sha512":"836ae6c018c3ccfcc61f2be49cbcdb41808b5da5140af51f464c7764cc6c7c3231c09bfe2b4f2a50c5b22f9e45c9280cdc0d61f516c8208a17ff8a0af0468520","ssdeep":"3072:YyI2liLaJ0X346Tmcxy21qx8+ba1B8SS8D:3Ja346BMaE0","tlshash":"90242a16bb1c31b007f3056b367a32ddd63a9014632665ede9aec06c236a33d8736e5d","first_seen":"2026-02-01T20:53:37.395184Z","last_seen":"2026-02-01T20:53:37.395184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/pragmatic-play-aztec-king-megaways.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:20.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-aztec-king-megaways.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979190794%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50746\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:53 GMT\r\netag: W/\"c63a-19baced52a8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7wTKNUOaQti917L3JImpy6oJX6bZmqE00OGI5snjlrGPWyhWHqCBULxvhKzoshw7JowHOb1Nch4bX%2BZn7HaktSwun2G65syMfs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745671dfa356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed82feb170e0fd1953aef040bc329d0f","sha1":"16d4d4537eb78ee53751d86db3ecd7d516df1e4c","sha256":"100dabb1310f29ec3cfab09c408dfefc9464ceebad8394d136ba93919e8ce39d","sha512":"b632ea3065ac22f14c161bd00548d8f3f900afa0f171e94ecfbb21306ea7365816f168d5a2132d806711266289903d6acd9d0c0926077facceca767088648c11","ssdeep":"1536:vHSoi1Wm1s2JhiR+cK6R25Y4YgdRf833IU5wA/9:K7FJhJcKe2aXgTf833F9","tlshash":"053302c4902c4a22e1ffae24ab305a5329679ea55037564ed685b4c7987f133c1f8e34","first_seen":"2026-02-01T20:53:37.396429Z","last_seen":"2026-02-01T20:53:37.396429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/08c39a0012534f66.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/08c39a0012534f66.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1b32a-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PamivigkPUXi3pOlq5MmAQfEfJm6dwi%2FdwEK%2FH0PxqnVxKfh9m3L%2FWtuk3AGov2OS2ByBNFWDjRZJDYPAtZTP%2BmXO1YNZ4mrHVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a3b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff39d75e72b017105228a3e3937e7591","sha1":"f2d18c32727ea5c8c3025c3dd6062cc64a0205bf","sha256":"bde5066619da447ebe65deb46930149c780552d9aeaea4827915013d287be571","sha512":"cc6a711c714a6309780c59e28fe35a28e70d35720b3c4f0eb25986f230329c1a1e047514909fc053fdf56233194352b7595f57e4de1271c715d0fbbc315a5cb4","ssdeep":"1536:0N29IxBQi6ha/rqj4gUnFZSul2PmOot685j:05P6M2jDRuPn6e","tlshash":"73b3f7f935d5f48207ab40a6c03f0006f32c5d37189e68a0a3e5ddda756499de1b3faa","first_seen":"2026-01-31T21:08:57.335286Z","last_seen":"2026-02-19T17:02:28.643844Z","times_seen":94,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/ad138cba44450f34.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/ad138cba44450f34.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"75e0-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQdOaU5lBftcChDhZuYzUCaIzX26kafGcwWTp5FaIRDDu5Zcxu1lHyTRymTylW4O1sT%2F%2F5Jjkqrx32y1%2Bmd5c4UN6jyZqM4d7bE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b5a4a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29819)","md5":"11ffb96341f3b620a5370514b73e3db9","sha1":"2451d15feffadad588466305f4a236f382f45e70","sha256":"a9efa5c83a5c5075fa40ef7ba4f7d964399f82426d6417889b7c84428f1b96ac","sha512":"8bdf52566b8af67e5482d9927f81970943cfe7386c5f27f4108d7d52c356bff8e9c971ce4dd132d8b5ec63c456b3465abf1bae4cb6a236f9a759ab39c94a734b","ssdeep":"384:wVm7PRyzVJe6cgrziQ+rI0TJOMLr1299HlDitlKQ96Wjzr:wVm7AxcgvSrTJhtcMLr","tlshash":"01d2b97071a096fc6ad344e6b43e400cb1386aa4c96d5561f3ba7cb8ca119c97e77f83","first_seen":"2026-01-31T21:08:57.360627Z","last_seen":"2026-02-19T17:02:28.728752Z","times_seen":71,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/auth/getSession","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/auth/getSession HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-b30f80c3a16d23ca-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 43\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2b-dGnJzt6gv1nJjX6DJ9RztDWptng\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMGCbqyNcvYiIaXMdPQV0MtQ8o1fKBVzlZRqCYhTN7g1UrmehslcahU6C5Nr6MIWxdbSSd%2BA%2Fn6TpFPzHgr2Wd2oiPYz9wgPZ40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561178e956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a35da7b2f88e0b2a1d5ebe0ec06102bd","sha1":"7469c9cedea0bf59c98d7e8327d473b435a9b678","sha256":"e1654c7ad9ce4df238c7c18cafe8b85a27ac81155501831fcb1583963308e9a5","sha512":"62b900bf1f8d35e3df1cac72810891745f874b0dfd4bcdc5da1a3f761cc1cbb934f7aa5c65f3c2692aa48860f0384333933fb3fa7d4051254ab4a3935f6adabd","ssdeep":"","tlshash":"f790040014043d3777514105710c5535cc13447c51411053154c453c45435c44007500","first_seen":"2023-10-23T05:59:08Z","last_seen":"2026-06-08T10:57:59.383214Z","times_seen":393,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /ph/static/dead-clicks-autocapture.js?v=1.318.1 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185480%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185480%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://zeroxwin.com/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.70.250.235\r\nx-forwarded-host: zeroxwin.com\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 19:12:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697fa58a-3303\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMllSr%2BKZZvziEuYQ8uisYYIjmhlftx87pyKbVUQHPk%2Bi4R07d8CBVn%2FcyYe6eTBR6vg0EgaIU44pHiZuJTGasNcd%2FTUXQv2PdA%3D\"}]}\r\ncf-ray: 9c7456154d4a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-06-08T14:19:30.211875Z","times_seen":5173,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-freds-food-truck.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-freds-food-truck.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28688\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:41 GMT\r\netag: W/\"7010-19baced23c8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4zZC80alEIyzW1Ldm76frXOtePpIsRlP5pBdtB29Vu3fQ5O3GMaVmtYlUB%2FL9VBDW9a8vAOcNpY9jGPGMkK8YzmBbG393nwwNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d2ec156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2e09c06d924162d0c742e2a82862e5cf","sha1":"597acef4cc0b2eba19e73d6aefc93f6159737dc8","sha256":"ab2fa810a1fb5db8b8bafefb388d603a4e1383a9fc6b05b901b2474754112741","sha512":"7617fb22d5dfdba39a8db6180aa44c73fe33c9ebb73989eca9513d326505bf0129b1aa0958c7cf3dd5e4fce057b1db034a37f6396b3f5db6e250a816a454f277","ssdeep":"768:wqpsCUwuupXobJCevFALU7wk6Vh+iA9k/mE:wqpOTCYFCevaMMmSv","tlshash":"2ad2f142414bba934cb8d398160483a53cf47a7411fe93e78d7470d4f9a670b75ba4d6","first_seen":"2026-02-01T20:53:37.399926Z","last_seen":"2026-02-01T20:53:37.399926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/privacy?_rsc=46v77","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /privacy?_rsc=46v77 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-bf3ca0d67421fdba-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/privacy?_rsc=46v77\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGEig3Z%2FSW9%2FgUKx%2FRh2yjTJf7M9ngNy1X3Dxncki1lT6%2FKVO6cbnc2kgDacSUbercXL%2Bsyl4Y%2FDYkTgw8X8X5eklODiIpYIGyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561e482156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1442)","md5":"7471755c30f4e2e9125a97455f85e662","sha1":"07f7073b6306042fcc613d5fbff9e0971672e9e0","sha256":"fa09c443383f96f1098e52bde01a5e51b896016d3eaee38acc35a65d13ccad9b","sha512":"54e56a480e4ffb440ff727afe3fed2c1b50c3dffc3b1d51a8c4a7b85ec3520fa397a73fb4230c13f7a77252b4c545c0f087fc1f943853d6ee199a0cbe0129824","ssdeep":"","tlshash":"8f410f798908ec4e5a67c969096fe31a560d1673c7701eaadbaccd0f1ac602e4f70e90","first_seen":"2026-02-01T20:53:37.212987Z","last_seen":"2026-02-01T20:53:37.212987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dbd0-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKEgJUUV%2B0t4JBkzhw2BZNrmilD3d3VLtBFtWJ9u3hVu0DzSl7Ty29XaBQzHn%2FF0LRYD5wY4uyu40FqKH3OGvPt9n87FNu1CdgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b09d756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"337352e89c0a500c19e7c3a1cd83161c","sha1":"5987ba6a8b8c8cc7f755431eca614ea7f5de1b96","sha256":"7f5b8463e4c88e51ebc803105b9099def8163754f3a4453bb66f822878471499","sha512":"40d9cd93dffd18143dced57120735d2b31bb2added5cb801fdde509eb9f44db073aa69656befbb1eef6d957e3c4d77cb4c73e814ad72f64b46947c4a9e1d60ef","ssdeep":"768:PORWnLfP9U7ifzsufcbBUZPt7zrjrhPwUBUBv5pGUh08QtKFhj0akpAQ:POgzC7eQ+ckzHxw2MYq08QYrj0akpx","tlshash":"31436da6f721a30cd3676dbc985343b44b75be34be22475bd975273fee050a04c22a89","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-06-04T16:54:27.221689Z","times_seen":473,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/84514c7510b6b9ca.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:03.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/84514c7510b6b9ca.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"3d94-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUdkXKAx9a7SuYz2TpRFhnXoEf6TK19DCvQrsrMPS%2BSj0ASTehSY6iMT10recy3QtPGaAg8jJRTy9dvjdTdkEHLNo8LKpSXxFD4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b4a2156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15764,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15407)","md5":"d51af061e259b2aac980c62c2a581cfa","sha1":"25dc5232dd34515d64d445c772aa386d15a843bc","sha256":"a058a237f6dbe04d72f900d5ac0cd02aa6c68aad91ecdfe74aeb81a7c23b3e3d","sha512":"b9977395310e5f15dcb8b94e1034cff5d09ec28908599e6d68a3fdb453b3d9c805e3eacfd9b42d7a1e156027d445600a5c38c8d5f350f92a79494aef77e1bc30","ssdeep":"384:RqybOz+GjHeaCgyP340BAg9p/cZNRAUL0YvK6dD:Rqyaz+mlCgao0BHl4RAULBC6J","tlshash":"ab62f9e972e6fda383a74194843b0007f6280d76145ea4e4f7e8dcea356094e91f2f99","first_seen":"2026-01-31T21:08:57.197191Z","last_seen":"2026-04-28T01:10:54.101669Z","times_seen":182,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wnxs72l\u0026sid=2nHq17xI8ItYgnbCABmz","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"POST /api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wnxs72l\u0026sid=2nHq17xI8ItYgnbCABmz HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nContent-type: text/plain;charset=UTF-8\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-9b46105ddd0579b0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nContent-Length: 2\r\nOrigin: https://zeroxwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979184926%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://zeroxwin.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLJCV7kAJ8GCdBi3ZMlRV3mgPWOq7BgY5msYTXao3PhkhsK6ngInWagVOWsELsdSxt23fEuSOiN9vmJ%2BgcGZzStIcWxfao4d%2FUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c745613bbaa56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-08T19:31:03.947456Z","times_seen":423588,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wo4d9as\u0026sid=2nHq17xI8ItYgnbCABmz","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=7wo4d9as\u0026sid=2nHq17xI8ItYgnbCABmz HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a355e4710a46cfeb-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185480%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0wPMDF5sbJUGTmjQxgay2NISapDgHdweZ4dQq9a%2BP460oE%2FRM%2Fs5i8IVqXdgTwL5OVIaB83T4%2Fyydd9YTpKGiy3O4n3AyLccgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7456154d4956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-08T19:03:01.352458Z","times_seen":11611,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/bets/lastWinsNew?filter=all\u0026limit=10","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=all\u0026limit=10 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-801811f1dd2ff4d0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"97d-WiVHJPZwt7G/biNQ5qNcMdWlvJc\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Or%2FjK2jnjrU9oP9Q%2Fd5D%2FrGnDoXc%2FbcPxDkGzfOi9t7cw8FeLGWuus0glWkLVsQIv79UXJQRKdNhsKXTV6Xy%2FlaRr7%2BG5lgk9ew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74561a5bc356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2429,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e4c0f603a143b9d3067a9dd901cef87f","sha1":"5a254724f670b7b1bf6e2350e6a35c31d5a5bc97","sha256":"6f425551112238e8191ca642fd1f04ab800e9f115bc2a53a7d195b6841d95305","sha512":"92bed40d9b9f06b8094f73958ff6f4511a32556a31eafb1f58bd3f7bf4301721f25808b35a58341739c45d419305da90c8bb4b28ada605dce8726cf4e77c9597","ssdeep":"","tlshash":"c3418e3964f81ca8e01c05c5a1c33518e8ed651728c4de508f6dcf3d96f9d49e906afb","first_seen":"2026-02-01T20:53:37.404012Z","last_seen":"2026-02-01T20:53:37.404012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/group/slots?_rsc=1uioh","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /group/slots?_rsc=1uioh HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-ba7fffe0bda8a1f0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/group/slots?_rsc=1uioh\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u00IF0lyLsFY1FknynsZMFjOWo1KmajztyPjFmBZfxkXYTr%2B%2F26mievqmidPVOpVoULE4ZEhgf07XnKHUnyPO8z9P1LPPD3gBXE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456239e5256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/f2c075ff8674f48a.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/f2c075ff8674f48a.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"a16-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4LBsipQlSmmn9l4yb2eH%2B820j6nKjBNp2yt5Uc2S%2FySNq9szKP2%2FRTFuNgowhHAGf%2FyqEtc7eOn8R3t0aNQam8dSujeBr8hPoE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560b9ac456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2582,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2225)","md5":"3e91325fdd36d18a20855a2c09856311","sha1":"caaf5398f37f8edb868296e2a35966e9fcaf2261","sha256":"b85d8f984c98d529d06bfbb6a1d848d9d7f07a28e6205538a10b8f6bd41d850c","sha512":"29c916de66c4f6b31a883bb274035c052566890e60b5d3c0e2414787fa0b80ff98041a3942f19505466c2b4349bd406c3237a322f583ade569cbb6fa988118b6","ssdeep":"","tlshash":"005164e32b4832fc28ca10681e6b6113969c753f31cf90a49a4cc5f4a6cad88f26345b","first_seen":"2026-01-31T21:08:57.26314Z","last_seen":"2026-02-19T17:02:28.785235Z","times_seen":71,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/_next/static/chunks/83f137a05a633d06.js","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /_next/static/chunks/83f137a05a633d06.js HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"54b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4br1P5078mLmoaCrSlfpX62fXrj%2FCT45wi8cOl5WeT76521Uky4rdDC7ccXyS14E893Dsq0Gdnb8KxXC3hMdvzVxVQt0qxCiYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74560bbae456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (998)","md5":"d71a9dfc74f1b0837eaf1c0c2ecfc840","sha1":"934dd225917e22545e4aa04118d7aeb28a86ccbf","sha256":"cfa807758de5d91ecc7139cebc4af03b69ec8a02410589222ec6bacea664be39","sha512":"a7170c749edbb15a4d2413673dc3ac0ca9a8daa21720a10db769fbb5189ede64f0d080f60e44f9d2bcdcff4d60ce046afc472aa64b9e722c6c2b11216b3f0d09","ssdeep":"","tlshash":"db2186980310a5c4b1be11d9ec3e410b702514b79b4d95baf0fc2c3a2b140c5a9d0fea","first_seen":"2026-01-31T21:08:57.199938Z","last_seen":"2026-02-19T17:02:28.759612Z","times_seen":71,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?type=lobby\u0026_rsc=xgot8","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:05.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?type=lobby\u0026_rsc=xgot8 HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a2ed88ba69a1134c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979185482%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=lobby\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?type=lobby\u0026_rsc=xgot8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahIJBYd1oxSBUIV%2FRruaQQAdOPw98IUQ0M2MmVWK3OqQzMXhulldF1hNPk6xxbecGhc7jvUbSJyqbJOWfIbRnl96KHZ%2F6sYVVOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745618289856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (823)","md5":"7009b85a0156c84400de05a0c65ae0a2","sha1":"94d4f3a0e20698efd8f9949314dbba9416a1ea18","sha256":"20d25315e4998e9698bf539115c111c0d3be3b3c93ab1b7177b867f83c631dc6","sha512":"ef457d30cc5569ce24338a25c7987b8e405fa4c6c54c1614aefc2b96a126d890f41f4075aa02e422b0477d0eef01262ca6178ad7e5b7c2db6378da72bc6b71a8","ssdeep":"","tlshash":"24418d0cc8099db498c9d59971d5d7016588bf37f1b88da8e04bdca4038b03d0beab87","first_seen":"2026-02-01T20:53:37.279167Z","last_seen":"2026-02-01T20:53:37.279167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/home/promo3.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/home/promo3.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7782\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1e66-19b7b5da3c8\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRk%2Bg2JpS0D2i753DMPX%2FKqlyCsl92g4NeUR6uO%2FAnEKQs6cne%2Fas0%2BwZi9EPW0kT%2B%2B5BGeX5rWBfmN7t6CflsKH1CFjCnfZ7Wc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bad0156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ede4c081b4631f67918ea29b84df3ebb","sha1":"419615db1061840c37e5bc5bf4081947bd5148bd","sha256":"33b256735e64989f6fcd5d28bf295e6e6d47ece66be5b9a43a96074166d74a78","sha512":"8b15972f0e61d08d22fe0dd6be6ac61b42f39d96a6f620ab8c85df5040f636f738bc9313c8614387020be54106d78fd715410ffe63db26f748b68ed3edf80e2c","ssdeep":"192:jRgHZlmBzag9JWBreRAFQZBSRyU3LZvjE:jRBzagqdyPSEU3FE","tlshash":"43f1ae7c0696320e81a9c82159f0b0fd0a993607cb42435cddecbacf2e99f4851c1216","first_seen":"2026-01-11T01:55:53.533126Z","last_seen":"2026-02-19T17:02:28.691621Z","times_seen":73,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/second-design/ranks/iron5.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /second-design/ranks/iron5.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7932\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:14 GMT\r\netag: W/\"1efc-1930f23f110\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOMBGvROkgYBwsJoMk1ABwQWRq8bfz5exGczXYvfn%2B5BZCXIkG0qBj%2FHd4zpghcCC5hFdBQrmoQ0oP3xLBCEGzKyllJDuIW4GA4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561d3ee356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2f768edc2d52838aa729688048dc311","sha1":"dede5a3a73a8d48e0464f82a86ae6c21f37aa85d","sha256":"7ff5fc2f6b6a1fd5de04f09f029c878f4f0826d391315bff15b9ff5ae7f9020f","sha512":"88600ec3a4623512d30ee30f24448efbefdc010f7b38f53bdc31bf97666d27489826dedcfc72d6d2606b09c993c963ddec91b0757d478e32bf082cce79a9f686","ssdeep":"192:Wfyg7W7zGmLX8fXiTC87SfW74mwbqei8XDEI4d:XLsviTCaszbqeed","tlshash":"79f1b06182631bf55c548f65121f33410fc2a1e54cc4fe3076aa992e7b78d9f16ec8d6","first_seen":"2026-01-31T21:19:25.634919Z","last_seen":"2026-02-19T17:02:28.810589Z","times_seen":32,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/reviews?_rsc=2a0hd","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /reviews?_rsc=2a0hd HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-8a7c5dbb91e86c14-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/reviews?_rsc=2a0hd\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bhk6S6qvuwH6ll1bJYW8%2Fe5U1JKx7biw1owGrUDIg5pWtTR8E9aRsrTferrRmjnPZ8phSgOhpe1inCUiiDde6AHAlEOxayyNJ90%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561e381e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6620,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1621)","md5":"73d5264a0dba25c87816a3ba320001f5","sha1":"6bfbd8d70bf048f5544b5bbd61a0097ab74fa6fb","sha256":"d04434bf7aa769d7a798b1c66a9a6b7d3f671b6d53357a623b441e54e5372926","sha512":"abe60de2e4aaf72f9550f1189f97102af585892eef2d428919e6f013dc3a5c3295912486a420aed440d25d9076c663f7bffc5928570cc6f77800eae5782c184a","ssdeep":"192:BnkJZV9snkJZV9xnkJZV9TgkB+UeJ1EfSv3:yhCTgkb2","tlshash":"67d1a5abd80efc581c36cd5c6c1f977796c9c93389344cace7adeda802190232b991e1","first_seen":"2026-02-01T20:03:45.047817Z","last_seen":"2026-02-02T22:33:10.159767Z","times_seen":34,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/vip?_rsc=7dofk","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:07.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /vip?_rsc=7dofk HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-894dfda260826c53-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:07 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design/vip?_rsc=7dofk\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KekNrdaR6h3P9pNGcKCBufbKsuxon2OYaDuVNXmqVsImA9XxbT1Vjw5%2Fe0PTgSlkkCnv2EEbVmb7oxUupZRa7QVBPzjou4Llp0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7456224c8056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"3db822142d4e31f6036212cdbfd16a1e","sha1":"f7d99a3a6b3524aff8467ce09695ad7663972f5a","sha256":"877c5e275865cf6bf4e85fd1382758ba2c18c68da862f8349d9a665500b7ac13","sha512":"d6f525461d03ca2da3d9f4c1a6604611e038a613413119ee95d49330a2f23dc614a0fe0d59a32d6cd23636f348adfb71aac2ec2c5a01f3b3b029356e29b2db4c","ssdeep":"","tlshash":"f6f052a3950eec282e2ccc8c0a5e2323849c18378ab51af8a2ddcd9c43c013a4b8a5c0","first_seen":"2026-02-01T20:03:45.052076Z","last_seen":"2026-02-02T23:30:02.798061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/api/games/home?priority=none","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:04.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /api/games/home?priority=none HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-bb465e823e0dafe0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3410-JNmIeLScyJBkdyghxazxaB5xLR4\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tritAk6w%2FEktEmPr6C7j7sQXrkJ3wmRjLeGsHvttxKADppSEg7ly%2B43B0E7odBAiFLondH6Ahs0fdbEUan0l6BOG%2BZo%2BHGk7FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c74561178df56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f37feab11f2d0906ad163b94649f6c7b","sha1":"24d98878b49cc89064772821c5acf1681e712d1e","sha256":"35af18de983a7e1faa9d59f497369e71795f5bedcd3c9f563a62350805f00084","sha512":"b1a4fdf503906783f78faf9e8bdf94c4531ba69e9973a0a9d2966914ff5a0cde2d36f31092d4ec571ed2af109821876ca7d94206e2d205d34e1275015918d4d2","ssdeep":"192:Neof7taL3t5NEf8JmxEPv7a29G71GDu4AhiEIT8rj8:9azS710siCw","tlshash":"d652bfbac4954ca9435f6f0110c72d0ef4bd2e2331c81c69681aee3cd99ed97e60769b","first_seen":"2026-02-01T14:19:43.942168Z","last_seen":"2026-02-02T20:55:17.580137Z","times_seen":32,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/mines.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/mines.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1734\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:17 GMT\r\netag: W/\"6c6-19b7abf0268\"\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNmuNILvIoYDlgOgb1LOS4sGbKLalDYrZ7fEAC%2BdtZG0lQSKtJDjEHQ9a79enFwOdIm73sAE57LLdW0PPzacFQnCKXnFYDnWvMA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c745619bb0156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fdb901c172b335aa0c59289d0ca1d53","sha1":"164b3ba4e8ef8a7f10d158a69f9f664e63085c6f","sha256":"a54b22a7226f14e4f83d960f2e8ae53dda7ba0ebe49587b1209ff36898e26bff","sha512":"633554002826f300bb24d88d9de30388a612c4f9afff50dc6aade8996a8dce578e4c7d0a98ae474dc83d1bf2ca0bb86a11db9c916f3c9d515b7a11ae414f7c4d","ssdeep":"","tlshash":"bf310b3e015b206166e29b6f633d17a48dd505c98eb3ceb4244fcea2ac14fd1d560f11","first_seen":"2026-01-11T01:55:53.426802Z","last_seen":"2026-02-19T17:02:28.799021Z","times_seen":73,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/games_new_webp/hacksaw-cloud-princess.webp","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /games_new_webp/hacksaw-cloud-princess.webp HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeroxwin.com/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32090\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:58 GMT\r\netag: W/\"7d5a-19baced6630\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGXVS%2FvIhXxQ203PTyUqrNwIGHptI%2FfotnM%2BiaIQJkgIoPr50MR5Vk%2FnMrPrgYuWyjhTTb5NmCprW3T3eyNXYCGLMkDT3clZJ60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bbd0d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e4deed576c135db37b273439fe6d657","sha1":"477b328b08701f26d932a951a3b4845eceac2df1","sha256":"790f77312bba30782de05a545144b4774a39bfe688314f46cdd5c9e08179a27a","sha512":"12464171a1fd127b5ec984da1404916d6a62e3e133606a3784fd6ff3177b18cdfd9e13438338ad3d5d084401080c3e4ef24b0c4d4e4e1c4080e08d85903f009d","ssdeep":"768:SR8geZ2RaJKaS3NTLfqbkKo/tnP9SmgQCeNqN4YEzdXSnH9wWY0q:SR5a0j9UQ99SmgQrNqN4YSB8dwWYz","tlshash":"87e2f12ec094d9a78b209bb1f470ae48d41c94d6ca6d680cdda5c7f539dd086f132ebe","first_seen":"2026-01-31T21:08:57.213813Z","last_seen":"2026-02-13T04:13:07.551434Z","times_seen":36,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeroxwin.com/?_rsc=1k9aq","fqdn":"zeroxwin.com","domain":"zeroxwin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeroxwin.com/","date":"2026-02-01T20:53:06.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeroxwin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 17:29:18 GMT","end":"Sun, 15 Mar 2026 18:26:56 GMT"},"fingerprint":{"sha1":"A7:81:80:DE:16:13:B2:77:E4:A5:B0:48:2F:73:05:EB:75:D3:79:89","sha256":"3F:71:CF:B1:B8:8B:AE:CA:DB:52:DD:19:0B:93:93:FE:16:21:05:6D:2D:59:55:CF:E0:90:10:5B:85:66:7C:9F"}}},"request":{"raw":"GET /?_rsc=1k9aq HTTP/1.1\r\nHost: zeroxwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeroxwin.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/__PAGE__\r\nnext-url: /zeroxwin.com%26blue%26en/second-design\r\nsentry-trace: 2f9ad0b4171d476c97a27a1900aaae92-a4e1c289d0fbcd7b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=2f9ad0b4171d476c97a27a1900aaae92,sentry-sampled=false,sentry-sample_rand=0.8701907511899374,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22distinct_id%22%3A%22019c1afb-06e9-7bb0-b13c-768c186fb5db%22%2C%22%24sesid%22%3A%5B1769979186169%2C%22019c1afb-0739-77ea-baef-a352c1ecfeec%22%2C1769979184926%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fzeroxwin.com%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 20:53:06 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /zeroxwin.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /zeroxwin.com\u0026blue\u0026en/second-design?_rsc=1k9aq\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHqxwxNXKSpVN3J%2F%2F94%2BdI49ga7xJDeCmoqbPReTRc%2BbBAzhY5JfiSXRVsnFQl8wi%2FTPGbs2c8swia3yhaKzCMjuoL%2FIMj4GmAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c74561bed4c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2697,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1794)","md5":"43a7a47da0ca304977cea2e452227405","sha1":"c2d3f81c0cd185da913c2dbc64b33a09f445da40","sha256":"29432847d38aae6f49798680afa39546dc793e25189397fcce37674aa66aacf5","sha512":"ca31b10e95a2871963e18f9a84bdedf516ed53b340ebeba352264dceaf2a293400f8bf00677069f0f146fddeeeee435b550743162c507266cabe89141b080f5a","ssdeep":"","tlshash":"6951959bdc1efc984c22dc6c292f6b7681c59973cd348c9ceb9eecac04481271b981e1","first_seen":"2026-02-01T20:03:45.11939Z","last_seen":"2026-02-02T22:33:10.202893Z","times_seen":34,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"zeroxwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}