{"report_id":"d3ff3c83-389c-45ae-a0f7-e8ce4576e932","version":6,"status":"done","tags":[],"date":"2026-06-06T20:20:33Z","url":{"schema":"http","addr":"yumwin.com/","fqdn":"yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"69.67.173.34","port":0,"asn":30295,"as":"2ICSYSTEMSINC","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"www.yumwin.com/","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"title":"Yumwin: Most Popular Online Crypto Casino Based on Blockchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yumwin.com/","fqdn":"yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"69.67.173.34","port":0,"asn":30295,"as":"2ICSYSTEMSINC","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-11T20:20:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.yumwin.com","ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-09","domain_rank":0,"first_seen":"2026-06-06T20:20:53.958289Z","last_seen":"2026-06-06T20:20:53.95829Z","alert_count":156,"request_count":78,"received_data":21494762,"sent_data":55318,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yumwin.com","ip":{"addr":"69.67.173.34","port":443,"asn":30295,"as":"2ICSYSTEMSINC","country":"Canada","country_code":"CA"},"domain_registered":"2026-05-09","domain_rank":0,"first_seen":"2026-05-24T03:30:02.135289Z","last_seen":"2026-05-24T03:30:02.135289Z","alert_count":2,"request_count":1,"received_data":7381,"sent_data":479,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3980-010af18f0f321f6b.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ebe2885d4d5b7870215ed1d746ae08f","sha1":"ececc6607c16410aa62783cea6de95557893c3ca","sha256":"68eea241c058d3a7c5cd5eb609397e4d833059221ade7f5154e9f68da97ef40f","sha512":"a14e01fe32f03659c957c6d5c9d01cc20c71308424cf842a7d178aa207358e270a9f531acc7d37e285a34fabd655ad88256cd82143dc1828eda771bc46bdbc91","ssdeep":"12288:9Fw3/38CUqBZw5AcYk0G2KVLCfEQ4HAIrBM6k18xyBByFt:uB7KFrR2BBU","tlshash":"3cb4c60ff3e4bbad26b57666be0f537ab31c2cb9d714e81496a9f0152344ca86135bc0","size":514070,"data":"","first_seen":"2026-04-13T13:34:34.626821Z","last_seen":"2026-08-05T14:34:14.245733Z","times_seen":5993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/6544-b0711005848a5ae1.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39a5893ca0e9dde921d815faef0cca25","sha1":"bf860904497bd9c873fbc6c44eff66b61d990a44","sha256":"69a245030c2015ad280eedf3d0e5c896f8672d6803277ee2b15aa20e24595450","sha512":"439a73175b07db2985b9bc16ca9a6b5a029a041d3285e4c6c6e74e3749a85c41cd2db6a0999dd0aad865f389558e77a38bd1e42f36a27d3ee02a6731b9cbfc8b","ssdeep":"3072:LxF1G4zn2Qbx7Lg5H+vCWpduOhWr8BqUH9d8YFdNWRmfewJTLiAezha1h5L2iQfS:hO459yOCd8/qGwUM3qMz74SIxTrt","tlshash":"3a15321cc778b7b12fed398936490c3fd66db570d7a202566994b3fb1088ce0506abda","size":932011,"data":"","first_seen":"2026-04-13T13:34:34.701686Z","last_seen":"2026-08-05T14:34:14.251079Z","times_seen":5991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/19-5bece4aba82fb776.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"499ae782218e46ba0165104a99a4ba64","sha1":"dd6335c8003db8dc40f3b6e5fd9ec389bd5679a4","sha256":"7930fcc2462bd18b8f3559392d9d610cb2a4cf2aad270fc533012c2fa8560ab7","sha512":"71885acc13827a064e0430afe760dadfaf8afacce9f7dabc324d265d126140a62d9baac56cb09e1725cfedc955eba79c0828bd9891ee524aa7d19448c1557aee","ssdeep":"12288:EW2sqZNSN87vIomx0wgH+vVWQo7AN3zoMaaql++gWuWUC4Qj8zINa8DPeo7B53zW:9NgvIh/VSUVPyzLW3fxz","tlshash":"02159459ca6602fd7f586c81ca4770698ed282136fd78afcdaba7e1447b0adf0301e51","size":936675,"data":"","first_seen":"2026-04-13T13:34:34.636004Z","last_seen":"2026-08-05T14:34:14.23667Z","times_seen":5992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9796-477f833bec802edf.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cd700563cd8e58c974d39b5117025a1","sha1":"8adb06045734081c226292a64b902365df367e22","sha256":"92c3493cdd4b2f4c088fc3c1aad125fee7a6efff6470de708bb5363e2c2b9e48","sha512":"89bd514505d7f05dc1d6d9124541bcc8aa98cb80bb21ecbf2ce07e05c4f9767ed6ff1f2ce6a99f5a994cdc9801fa416e5d37ef0bc5c046b18d4eb13df3a033db","ssdeep":"6144:cX68qDg+HzhjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcVQoDMEFilOHIUJW3bXlB/C1:VjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcJ","tlshash":"eb44101c8f7242edbb187c80ce4770698be586466fc784d8eafb5d244ba05ce5342f66","size":261678,"data":"","first_seen":"2026-04-13T13:34:34.615711Z","last_seen":"2026-08-05T14:34:14.244723Z","times_seen":5992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5669-ed334c2dbb466446.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6438c3dec7c2f8d1a4393aac0a9f590","sha1":"931f6f0648b68a394c0558fbb95934a059b7756e","sha256":"435b360ed59df86f97765d5fb68e6fa87486367009d059ebb558ef68a88bea43","sha512":"d78d1e4cb985aa6e6402fc821f4abd3f7d4db574d6d5e328c6eedccd61816ae5138844a368dfd471fcd1ee62877d851efebdbc1c9c93d3dc664bdc7d90de3258","ssdeep":"12288:+3PyxSJSN87vIomx0wgH+vVUqmAStvp1H/llr9dhLR5EdNbE3aYAiLQDEmAx//pd:jNgvIh/VKdVPyzLW3fxp","tlshash":"2455521ccf9201bdae58adc1ca4770254fe286531fd789ed96bb7e204bb1a9f4301e61","size":1370944,"data":"","first_seen":"2026-04-13T13:34:34.695086Z","last_seen":"2026-08-05T14:34:14.263474Z","times_seen":5989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9689-39df663debcc7932.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95575815245fac0dd0f1a088b5673378","sha1":"b5fc9a98ebaac4eac518520eb74304a19af4c4b4","sha256":"2b609ad50f89d9da15d3da8423cab5a459bb395d18125b50ac3646d7a4a7bb24","sha512":"cce3d8d652ccceb67e5c4091294a2c837b597c36be10c62be39c860fd5418c6da27b20da4e2067ec964c7a0bb667cf3a577a7b3bdfbf5e4c013be7f66a24ee7f","ssdeep":"24576:7tPaAKapUMi69Q86f4lJay+AdFYR/QNnBKM7x5AKGE5X4iOJ:u7KwNhQx6IIiOJ","tlshash":"b665e039b224247946944086c05f290aaf72541f29c5c4ecb678fcdb5ebdece237ab74","size":1462413,"data":"","first_seen":"2026-04-13T13:34:34.700386Z","last_seen":"2026-08-05T14:34:14.266242Z","times_seen":5983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3121-84e2be85f77396fc.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b869f389beaf6b6ee305c2aba742110","sha1":"616f5957c5c11da916d8ffedf458597b7612b071","sha256":"ff0cef3d5e2eb5fd8fc70bd3af62141c28494e8218ca265cf9a5e5928df7818c","sha512":"9ddf70d0dd79a02c44d6a335d5170723a18ae5b4981c674756d69075f92eec44f398da73f2145878630de71aafa77e6da60cdb26bd138667b448dee4d3b1582f","ssdeep":"6144:A+AiF7KKW6WUSoMtIn9Ghv37xQnp87m0Sw/KKSUSOYYMCI:lY9C","tlshash":"eb242b497290b2e817e762a9547b282ef22f7d3cd222691477d4c87c3349dc8913af9d","size":224282,"data":"","first_seen":"2026-05-16T23:25:48.532058Z","last_seen":"2026-08-05T14:34:14.224869Z","times_seen":5933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/7262-260eb856ec86ab3e.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc5c946ea01e852079c01158915eb9ea","sha1":"5133bd0de532b10449bb08521a92ca6a1887b7eb","sha256":"4a07fe3714db1466ba3968c1de34671f62ca3d5a3e9a01c12fecbdf73f2361d7","sha512":"18a65b639abe772a19c8332cf3709c4e0213353430e032b2cd550e739db2467dfd24ad1fcb4a4ea3675c81f34215a5ffc0ffb658dbf80ff70c2382171199b96a","ssdeep":"1536:nopcljgCIsBEzrJ8i7e85k7yRck5L8Nwxg98:nWuUCIsizui7e5mckJuwxu8","tlshash":"d3730a953180f5ed17e381aac42f644ee32f5c2ce51a766463e4c9ac725d8c8e137bac","size":77603,"data":"","first_seen":"2026-04-13T13:34:34.62862Z","last_seen":"2026-08-05T14:34:14.238467Z","times_seen":5992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9883-c825881b2c3b0fc9.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcc8e6423662c12c5682af8dfa62a5a8","sha1":"b892e8086c047484a6e09910e1f5856e5f607bf2","sha256":"fae79308e4825e4d0f92e72cc85189405fb0c80569638bdc473eb7743bc4d4b3","sha512":"c48d27ef493b6d93cca9320dd5602a5de168d7deb5ea80dddde2daddf2b75293f15df2de435a834ad87802ad9497e8bd92c4763018a76ac0e6c897bd15689d90","ssdeep":"6144:TDWV4xt0J6T+WqV7OF8JpCXy/ABCf5iwEVQt3byQvUfV:Tr","tlshash":"6e94a829494416622b6323cd268bd80fd08af2658246c9b9f7964e7d21cfdc4e13bfdd","size":437773,"data":"","first_seen":"2026-04-13T13:34:34.692397Z","last_seen":"2026-08-05T14:34:14.237849Z","times_seen":5992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3715-1862ad9008505962.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2927eacb55a6224ec8cd6caca3db99c2","sha1":"a2bad0fd2d18b815ca48407464d6402918345813","sha256":"08f764ea42a0be91df8df5d26c417926f70a6721d2ec38264a3a28f13a98f974","sha512":"a5763ae91e2fbd84c6843f454a37179ae3083d4288200cd9570e88eaf655d5e1dfacbfaa5feecc671ab867d991612ca4464fcbea23a406e706e19799d9245a69","ssdeep":"1536:G8iMZeCMcsspNYlpAsz1jzsRr3KTArL7ml1C+Rmsqq99WsA:JiQensTQmYBLe","tlshash":"6683c764f1e0f6d4e1575399c92f460df12f2eacea25782cb3f5d818b7044d8622eba4","size":81522,"data":"","first_seen":"2026-05-16T23:25:48.524516Z","last_seen":"2026-08-05T14:34:14.228312Z","times_seen":5932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/4577-b61d38b6b034d783.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41103c0b0ac58161ba21e497c169a924","sha1":"c88e93fcd1195642c4470d4016f019ccd079aa1d","sha256":"be4819967273ae5cd6b750269b38df275e7de51ed59c459e52be1a3215abcec2","sha512":"008a7a566b759f0ad50cb551e1456f93aac047c0ae8c195c29e7a590acc5cc5a447be5e6dc17109e5de66ac7dde5a1a6055e83f64fcfc296ee418150c4664491","ssdeep":"12288:GxIYTLljXNW4D93yq3F/1hWJ24cvYkwl/eH3q0kCwI3UxrfZfM6A333xJUgHAsA/:3/cpXlKxUvBIVV/7x6XomFnoMBnxBqyg","tlshash":"8355c42d8e6641fdaf186c81ce8770658fe2c6432fd785e9dabb6d204fa158f4301e61","size":1365559,"data":"","first_seen":"2026-04-13T13:34:34.693793Z","last_seen":"2026-08-05T14:34:14.266935Z","times_seen":5991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/7185-18ae9a791372e1e6.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e544f7870f188bf46b3e80deae4b5c2","sha1":"c9b71ad31e7878e126f3d4085808204a956e45f0","sha256":"011cc7b4ec4c099c50467a4aa4107ab14154ae92da1e967d0315a860e7c5d43e","sha512":"67e931d851fcfd699adabe96babb9ead212cf7b85dc9cca036822a1661c99d16f144047ac8e0523f98abff6ef19fdaf599c52049f3afb3b3659a97447ecf8a2f","ssdeep":"6144:QM59C1szfrCWDw32B9SKUVG1DmeSafWTnp2iYEGeujxK8zDLUPmHUVYL83uS2a4W:mO7w3qEKUVG1DmtafWTp2iPtIIHtN","tlshash":"aae45d1d72c072ac17c363659a2b581ef36e596de121a804e3dac93c325ddccf13aba4","size":714342,"data":"","first_seen":"2026-06-06T20:21:01.810688Z","last_seen":"2026-06-06T20:21:01.810688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/direct-router.bundle.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b82182c1e759089fca0e71b443ac881","sha1":"82cac2102f3d4b4162c42cc47de1aa3d6fcc5b38","sha256":"d1195553e64a02bc8f2cb2073233ed0ca7344751b3564b531962040be8206d02","sha512":"da4e0495fedc2044499fb46bcc00e3e30d0d6db4b880f215b2a6f36fc64227434d7a9029eed13ebc01ba99f1571dce449fdea108dc4e08b922dc39693590d032","ssdeep":"3072:vqSp7BygEFCXqLkT5vd5XnTWhNIhdmkIxWjlP3/1JqobevmMGWR042:vqSp7BZaiv/ukIxWjlP3/SmMGw6","tlshash":"22241aa93a95f1226ab3027310df5803733d352b280d4d61a511ede9b4b845eb17bfaf","size":220065,"data":"","first_seen":"2026-06-06T12:20:43.1911Z","last_seen":"2026-06-12T05:22:58.557654Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3585-1a2341a418cc0f3b.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d66e895831146a3fcda6c0de48e66fbb","sha1":"ed6c9b6bc6805e7a74c90c2f70040a22a7c0f9e3","sha256":"ea60fb56fced9d92b0247021093d020a5438a67c1084d715a587c598278a804a","sha512":"6204b75617d69a9c649c089283b8fff6285c43d78b07045799a230225ffec878299a45b73c0b05a85a83ca19874e7de30333065e46c981d3720790649ce965c2","ssdeep":"6144:f9gGcm/FTmn65dg2/s70cs6eWBsY6EHNfm5Dlf3+FFS:XhWwKNI","tlshash":"3b845b98725060e8a28762b9552f154db33f2578e02ccd14e39ac87c7295ccce63bfda","size":376596,"data":"","first_seen":"2026-05-16T23:25:48.549118Z","last_seen":"2026-08-05T14:34:14.232823Z","times_seen":5933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5709-ea7a4340808316a5.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86062450ad0d41acfde933cd4f31953a","sha1":"98896280abf82e8d70f2741c3bf515ee52f3ed6f","sha256":"3cb93241a78f6343802542c1727fb0a279298acc8f51e60a02cb392edde1a38b","sha512":"0665d5a1dccbf6ba1d6228806d8d71fadfc66ce0eee617eb20d1849de6b54b0373632e91bc6f6479e2e81d881ef965b481ee712fe221a4e14ad2fabf935b079f","ssdeep":"6144:7nRjnRVLWQuV/er6qcEhJMQslkFN0bbLTYGifRh3Y:TuY3ZslkFN0vLTYGi56","tlshash":"b165278c67b5a3fcf505b3f8892b58747e6a38fabb51c438c3e98d14e1510ac89658d3","size":1454652,"data":"","first_seen":"2026-06-06T12:20:43.204834Z","last_seen":"2026-08-05T14:34:14.262925Z","times_seen":5859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3047-780ecd63e8341fd0.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a45ff6317fa4327137123bb7bfa8d4b","sha1":"bc1ead1c1e57bc9d70d9ce61b6580fcff62dde6b","sha256":"52347ddc20c0cf9d1a0b8d9b4f7324defd9706465148f58c081f4c07848b1d65","sha512":"714d24afd1fc0a2eda39f7f9793701b61d9b29be01f251c4cbac43a76732bd29c0352d99eb68cb43e69e5670f847ea3e8b4ee9593188b64937437621993ec32b","ssdeep":"6144:fT+0+Qhv42Fh0idHSlq9p0jy79DMHyPCij6MIVs/e5rKYfxGAaXaifqUMjuTH8NT:rrfOR1","tlshash":"d3644ac871c1f4a8929361a6803f050bf23d2e2de45d9454e2a9c8d87979dcde237fb9","size":316805,"data":"","first_seen":"2026-05-13T18:10:45.788088Z","last_seen":"2026-06-29T09:43:46.565764Z","times_seen":4314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-08-05T14:52:21.563572Z","times_seen":52647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5917-a224ed597077810e.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42bbafe75ad2bcce88843c34a856f075","sha1":"92d6a0fc2eb092bbc0c0f139caf2fe4e036caa5d","sha256":"b09a487264aa608e429b8cee7bceb7ef4e88312de25929d66713fb185ffec88d","sha512":"8ed3ea0538aa72ae6a1e5a707bf4effef86fe0c65de0c86738ec1bda32b042637e74c6d305bdacdec7830724258c0d844c32cf1311a415ca1650ae0954e75fa9","ssdeep":"12288:DkmjKxHLIPrsjbDcvnTJmP0I8y/PEg3Ahkz1epv3BoKuW+xMQT1y5EVNy5EVIS3P:yH","tlshash":"0a35bb4887aa42ec6f9d6d80c607744a8fd69513aed789eccbf9be101770ade1311f42","size":1150596,"data":"","first_seen":"2026-06-06T20:21:01.839846Z","last_seen":"2026-06-06T20:21:01.839846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/2643-f0046750557ecfce.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e80ddc9f6a618a74ae2024b1368d41","sha1":"92a5cb5a65b6db5e9fe377f30c867d91395fe65f","sha256":"cebfb1f5431b46b051bea9d7bb688099a15ae2d0bc9d906fad0678294dce11eb","sha512":"96d815f6d514ef47fafeed39af74b87f862781c464d29d2983b0b580da47867a08fe38b8f4cec9a32f181dc4174b981ade00e3b797cc8cdbcb48a0e7446a071f","ssdeep":"3072:lhsm2vphspSZ5qYHGKTG2Ucav/sLJ7T8Z2KxTofh5p0yEdQ8IeCp5+V0z0DLdD3K:Q3koZ5XG5sdSqfhwyEGASNBpH/","tlshash":"83440c2769c4127c2bc362569d675e4ef35ca918e215b419f3d7ca3d338c8c4b13aba8","size":276387,"data":"","first_seen":"2026-04-13T13:34:34.673947Z","last_seen":"2026-08-05T14:34:14.233399Z","times_seen":5993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/249-0939437a59f2504a.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3f51dd99a0be861049ebd4632a3542e","sha1":"3d08751beaf09ce31d44722d42da0650b0fc914c","sha256":"10976f7c91d6bbc5f35b9cd987501ad59a99b2a162a74b0ecbc9341afd0322d4","sha512":"4d67fb8e55edf461b142a253a2a20b675c1e9bf2c65ccee6af44d85dcf05b0467b1ce35a7f96a0f8cacf5c0e5c22ff530754f8286ea07eb6d339d72dae198c76","ssdeep":"3072:BF4UMvqBX6EG8q4H7GRxe8JTDUkan3busQd1yKlvRnTT/vD3Y46m+OEL4uFAQNgu:34UMCBX6tdDHV5kD3QPRuN","tlshash":"3d54fb0cf7fdf3b919ec389a364d0c3bd9a83a35d3b5625249d0f3ea9444cb4016a6a1","size":281586,"data":"","first_seen":"2026-05-13T18:10:45.999462Z","last_seen":"2026-08-05T14:34:14.248625Z","times_seen":5940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/4310-53eb2d994601d39d.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cf0afc09bb69320084b8de536c82c15","sha1":"b366ac3a2df29aa97110376475fc08e2b310e168","sha256":"5f6628bec7be06e9879a734589c7ccc242657acecd391f739a86d88f2597b1ee","sha512":"cb32c35ceec0ed7c3b0cbb53eef1a7754053eb228fbc9c1aff2abc56eff7aeccbac081b3fa583f2ebf3ba836f3ea808e269b380636f9fb04b3c887f425900bc3","ssdeep":"3072:PSHoE3ssKaFRWxTDF0+uoWTr/9CPxZi2rbG/r0mJo46W6E9bVWqnEbvY:wb","tlshash":"b734370cd7bdf3f51eec389e36490c3bd5a9763093a5426688d0b7eb5485cf400aa79a","size":241643,"data":"","first_seen":"2026-04-13T13:34:34.704197Z","last_seen":"2026-08-05T14:34:14.237239Z","times_seen":5992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9338-742398fd846a71c9.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35949001400b87164feee5e87bb4d21b","sha1":"5fca2da66ae0589889299bbfa3d213e5e04c9709","sha256":"16ed0b2c2e53f93201db0a8b5787453855e66151890115a58c93605771ee912d","sha512":"b7873b0ad7fc8671962347515c0f6555a6cf4b524b3da006d4dfd697db93634a65337b5d24c1802baf802dde2fe3e8bdb81254baf08f4f7f44f3c5355e62bd4f","ssdeep":"12288:ypzOZxRLLD3iWRSM9LAlsr1TxmBY3gM1+7Yj+fjxl:ypSZxRPFgl","tlshash":"fc35a35a408827922bb37695269bdc0fa01ef52cc743c464b791c57e26cd9c8a27bfdc","size":1139216,"data":"","first_seen":"2026-04-13T13:34:34.708599Z","last_seen":"2026-08-05T14:34:14.268859Z","times_seen":5988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/1342-e39ae382517d6e27.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b0b6471e752a72a4a67baffa5e490d6","sha1":"b22ad340a0948c9fd128ad7703281b20d3a2f91c","sha256":"4234be7a3de7cd09bdecf233b7e03b08945e08acbfe8203227aaa856f378c39e","sha512":"77a017b0409437148709f41743bbcf186ac0f144c7b82d60f8aa9b5c383587a655f7ee6ff2e7d8d1253bda8d234f6add0b224c6dad08dde55a6b9a4a421f2f41","ssdeep":"3072:2XikgRVZiU7NiK6xkdF3GK0/NtT8aH7fwTqdypuWw+1sGKIzXBX8zY72ibkhfv06:2XNUpieiztQyz4zMV","tlshash":"7565cde8678526e5bd4cddca5940b4ac007980370dfbd1cceb2af4e740b87b746a9d26","size":1449011,"data":"","first_seen":"2026-04-13T13:34:34.691135Z","last_seen":"2026-08-05T14:34:14.264066Z","times_seen":5987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3275-bbdcc2e176783c7f.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29fc6e35b3ecf993dba69228545f4d1e","sha1":"6d3d45d5d6e89c4c0c4be382359946c7f0c64529","sha256":"23fb767865b4ce96a897782c29d5a975a49d03eaf182146c61cf437eb690eb62","sha512":"17baad66b6b4cb23da59cdd3a0d01eccca6dcc23a46c7dfd990ebe03b91eda2b8749261247e731ec40440fe1380174321def6faff0fd888fa18663fff48e7a1d","ssdeep":"96:B6MlXsyMUxCCPs1VAbAvHbhPfjBItMbk6wd3E6l7b+5UYwhP7gb:/XDZ8CPuCsH9PFItQAU07wU7P7gb","tlshash":"ffd19961f091ebe4f8b708e8952fc40e726b2644d61948e1f5bbb8701b101f87b27f89","size":6161,"data":"","first_seen":"2026-04-13T13:34:34.666569Z","last_seen":"2026-08-05T14:34:14.251614Z","times_seen":5989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/8824-ddffb509a90576a1.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88138b1397ee14b04ead267aa44c4196","sha1":"760b927bacdf81d73a0f2084bfb3ce7a76478e63","sha256":"a2d07d31470b51490786beb8167c7fafeae5a0236cb44537c4dc8857b3c448ce","sha512":"9841fadaed80aabc013a0fdccff0b1356d14a06a2952bfc883dabd299aa5fd9a4369b504e8ac7d28f47c27573be3bb4b94b08d389d3836697c2334185931304e","ssdeep":"12288:3fB+XoxJuhu/v7uV3rIPE8zGglvb9hsm8sMQMNIYsUKwJAsTF4Xylyz+hYsUUIJM:vGgthhsnR0yF4XylryF4Xyl+","tlshash":"94a4be69da7112fdef516ac0ca177015dfe6a6936fc789e8caf6ac040bb05ce4301e91","size":492118,"data":"","first_seen":"2026-04-13T13:34:34.606306Z","last_seen":"2026-08-05T14:34:14.257129Z","times_seen":5993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5358-09e95dc15b38e315.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f713024361899c28b849a192c4b6bb7","sha1":"c36185494a10f052b8f35d6d208736be09de462f","sha256":"edfc9c94f67ecf274b6edf92d04ea593b25bc1a381e975191e6885ed54905d07","sha512":"0f3f3d17c8b8c1d2cc4336aecbf264494f7f8e0e5701733ed98e2018a3964847ca13a0bda5d7f3ab317db88b1571322024d89aa40ba3d6fb1605acd5f5056ba9","ssdeep":"12288:RHJJmOl48wdPyBOpCwGQWA7k3gbrUavjqi:dmOl48wyBOpTXbrUav2i","tlshash":"8425190ea7d473b41bda3149364e4d3fe25cb638c352d016a5d6ea7d228cce4613bb98","size":962389,"data":"","first_seen":"2026-05-13T18:10:45.995461Z","last_seen":"2026-06-19T17:09:20.086163Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/8648-b9a24ba9b5bc0c95.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3f599cddc9a87120376d9aace5ab02f","sha1":"670c9b9a38b2d8867d420907c2eb55199d122826","sha256":"44383463479a0974fc0757d4e10097dd0d43519435364606906252bf0cef20d0","sha512":"5b5c786c66056e07adcb606c3819134d0fa2c1423c03024101bf6b49f00b17e976a40da05bb6bc026c72c7c891c6fd6a43900e77b55ffd7358a62de28652c727","ssdeep":"1536:Trle2nu/m82CFnMxwZCLVfvDzQjhY69xAq3CDQJUO9fEVJoZ1NbpGGVitgmdAYb6:TYUH821Ni95SQJxfwURk5bseKbsK","tlshash":"19e3e889f191f2fca6a224a9412f444ef22e3f4ce5255410e6f8dc083a586d9bb37fd5","size":144939,"data":"","first_seen":"2026-05-24T03:30:07.371871Z","last_seen":"2026-06-06T20:21:01.817974Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/1617-516db04f21137a6a.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fdfcfce61be021904770b2b372ca81","sha1":"bc6a8555479c61ba37ea932d435e967aa1b28420","sha256":"d95d061529e6b787411e9de741b9946e0daf5da613c585a1c9ce261c18aa12ce","sha512":"f60ec3821ceda20e18cabb5a1a2b0f1d1e1de6d97c049c912c6ef61cb827f169ae6dfb45bba561ec96a4f5ed9454d3ca07ac3c707aa0bac224f9736c56df84a7","ssdeep":"12288:yzq3gKoizq3gKo1mTkcAA92TkVAA12TkVAAD2TkVAAF2TkVAAM2TkVAAm2TkVAAp:+","tlshash":"7a55fd4c8b6602ecab986cc0ca0770558fd586177fcb89fcdebaad145bb16ce0311e56","size":1310318,"data":"","first_seen":"2026-04-13T13:34:34.702982Z","last_seen":"2026-08-05T14:34:14.268124Z","times_seen":5991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/7580-1e05813e2213c2fa.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e95d3438a4d191ec149a209f2321321c","sha1":"ad5631919f911a7b20854095d4cf3b10658d364a","sha256":"764376cf71ad9d64078ab383b8c383387c50daaebed8409ce6573c4674206551","sha512":"3a4b0fdea4b4cb0a24f7005fd2f41a3473e46b7e5206716718550f868b2249856ca610de63b4c2a8a6e6113480cff06728878f0aef293c7c300276c174579336","ssdeep":"24576:K/cpQlKxQvBIVV/7x6XomFnoMBnxBqyk5QqBQqn:K/eGGqo6YmW","tlshash":"f96539298a6502fdbf596c80ca43345a8fe296137fd789fccaba6e1447b46df0301e51","size":1451511,"data":"","first_seen":"2026-04-13T13:34:34.697666Z","last_seen":"2026-08-05T14:34:14.265621Z","times_seen":5989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/2366-925fc85d237b17af.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7911660cff2a47fdbc9415ace2e3188","sha1":"3ab908a0337f5ba043a079b563d3c584521ece41","sha256":"4a2741bde36436647e2ae672eb2ef1262c83541e3d13784b48cb37b165bddd8d","sha512":"e21a40e23085dd405ca6c8473453fabc4c7df8999a472fad7a94a4f26856b2d5ebbfcae375412db956a96f92cf7f630b5804e5090ac19f22eb4b7a1022c96b3b","ssdeep":"","tlshash":"54f09e9920057c387abb4c02096e8c2a287c3572be091581e707c5a0009faf85170e9a","size":467,"data":"","first_seen":"2026-04-13T13:34:34.684954Z","last_seen":"2026-08-05T14:34:14.258688Z","times_seen":5994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3083-d0071871f85c1c39.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e8736497d50701fd7e98b6af046968f","sha1":"dbfea11666fbb04bc71187a259b4318e935577c3","sha256":"f2bf0ce31e01e02feea9a6dba28d4318ce7e060806dc0c8e3a312b86a47bf163","sha512":"27ca329911a680c2a0654f53c3acb9846e41afbe86166bc73ee90c4f71aaea53c07bd3c3fe30a058e58154e9ab721f0238fcb7d087b6cae9a0313a6cabcd3aba","ssdeep":"1536:9wnbMGYAkPeRRJ0u4fU5g1+GoDJy+N0jPkV/KtXcUN3tadBZx4fH+dMxteMSVgvM:9wnbvvg1+lhN0wBDMxOig","tlshash":"84d3961600c827b52b677b25265acc0eb61bf23dc7429924b694c43b168edd461bffec","size":140858,"data":"","first_seen":"2026-04-13T13:34:34.639501Z","last_seen":"2026-08-05T14:34:14.257638Z","times_seen":5991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/4212-38fe49b6236c7c6b.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1ee028598eb24e7427f83baa42198b2","sha1":"29ecf0ab8deb78392a4121a31e2fb63c764ce99e","sha256":"108693690d6f21f1942f276dc1e12eef8524ccb9678e1faeda902063ab3b2f0b","sha512":"71bd29cc66d0adb5ad11cba3d95baa883771712afef080e8b1f7a9c107dd9beb2404a2c43dd616aaf717ba69cfd4786e0c801ff3d88b6d201b8156124535fbd3","ssdeep":"3072:IxvuXFqhT8pi01EOUIMdda2zZ9GFOTASOeBTny//G:qvmFqh7MEOUVL1TASOeBT8e","tlshash":"ccb33b9972d0fd9d3bf3946a8c1fa40ee2795c2ed42d710462d9c83c72599c8e136bb4","size":114414,"data":"","first_seen":"2026-04-13T13:34:34.631899Z","last_seen":"2026-08-05T14:34:14.245295Z","times_seen":5992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9564-0cf3b4f099c86954.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1133f31f38a7764ffc9bd1b3df097e8","sha1":"d5d2b6cf4dec8e50720d6754d015bc4736f6c72e","sha256":"5aec2933ae085f9a1203fac9a6a05a2dbbb5a4e92ceb66b1124084dae588afbc","sha512":"abfc85e1473134449c3ebe247ad09931b39c01a2b43e65ed5f863b30b2d791ee25b24d9335cb778771683c3ba87d996ddbabd6668d089e932c3e8d57d92cac20","ssdeep":"1536:sAvhk/n1ED3wnpzktrXFlnEA8aqLE4++E/NL7:sAv6/n1cIzk9FlnBCLE4++E/N3","tlshash":"9d531c8cf3d4f2a927e670ba283f1c3bd12e7a34971990645794e6b42549c885233bf9","size":61557,"data":"","first_seen":"2026-04-25T11:58:25.658808Z","last_seen":"2026-08-05T14:34:14.23397Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/free_reward.webp","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/free_reward.webp HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/_next/static/css/d599adfe9f648657.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CvtLgoFC1ZhGL22FYzssnxOoQR2dVj3k9E9DX581zEUSD7KMbYhMdKB3m2VYhXFb0cTJpY%2BdsmJVe4CUDnXbhmV%2BVDb8bhTd9qssFmGqnZdTPeXZJ%2FsHgT6UICouKkeqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 9606\r\ncf-ray: a07a1db10c212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 390x108, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ff1da902b946265f24272fc301815b3","sha1":"395daddb9c99b6f15b2651985a115e6395128db6","sha256":"67f87d0d17d6c7549cb8dfca755651258f123d24bd28e67bf90a6d1777831edc","sha512":"3e60ab0677a151c7eee4111c0269503dad38b9e36e9a7d52e540968d642612aeecaab21091a3c3795943bfcd701b51efc87ffd283a8273a4159484de4a362e29","ssdeep":"192:AXpAE6uvkjO9qzNScQt9EXi9N6y7D+AKbr2i5+q1Hj70rl7zkmt:AXX6s/9qzNIjr7cbiIRjorhJ","tlshash":"35129e54b67eeac19fa7c5ef26f093931236a77d11b1e8c3087d1ca64464930f384a1e","first_seen":"2025-09-28T21:41:24.335314Z","last_seen":"2026-08-05T14:34:14.252102Z","times_seen":10408,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/it.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/it.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSm%2BxYv9IIJKfHi%2FSuDn24LPTLIv%2FiaJ2FYPMQ3coKTyFvYn6w0MM4kcg0lNhulorUPkVjSh5E5KcBlFJECRYmSrg5YvYJworBQ9gQ8VvgvG9mDsNyugou33bum6veWLXw%3D%3D\"}]}\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1db1cc4a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d4f20f2f1c88447480002bbf675404a","sha1":"e4a918db17e02d130c9733d7457211389b459535","sha256":"41b974254f3dd5b0853af7585c0417998a1ffa52e97e000fe2af3eee2c916d57","sha512":"04e180d7684ab9fefd920a74433c7fdea73380c5ec2588d6174ea6c14a20bdf1ebaf250158977863fd79051cc5012e5da4b9453f88998262b5cdc1672810ad79","ssdeep":"","tlshash":"e7d02b9dd07de0c448229bb03e9e31c142962327364500daf04b271861cc3ef7e41f04","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-08-05T14:34:14.231154Z","times_seen":13161,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/holiday/hat.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/holiday/hat.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/holiday/top.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/holiday/top.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbMEBaP%2FV1QY7etjV%2BwjgSuXTQ0xdqH1sX2PbxIlxqpVHx2ObfheDfJ41kABnNkju0HtNxmKF6RVCtWt6Y8oey4LIuGfBYK7w5UruYYauUBztMzF9EQ%2Bml87ZY6EzTmpSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 48097\r\ncf-ray: a07a1dafdbb72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"765e4b902462e81209a68203122c5462","sha1":"c8a22e10bde49777ae443e9f3a3b6bf474659b68","sha256":"0d81c69880f645eaa8ad5bc7f874fe5c302d163c6ddf8e2b2e5633c222949f88","sha512":"d34eb7f720beacdf9d545cc1219a56e2a26b05477d98d9ed188c116bc9319de2f49db046893a0ad1680ae6a9c81bf69190f5de47bc94fef0b5f99049f36a65df","ssdeep":"1536:TVcmxdYMDacj729Kbg1AsjwaT2ROc8n6GheoROmsrLc8h7CJaEukrWE/A:x/FDa42Kg17nZtgER+","tlshash":"47b3f9fd6b6185e0eecf8af1dd3649907f1b34fe2b52525482a4ee607833e58894cd90","first_seen":"2025-12-07T15:18:05.795582Z","last_seen":"2026-08-05T14:34:14.254108Z","times_seen":11998,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/landing_block2_semi.webp","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/landing_block2_semi.webp HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/_next/static/css/10dffa892f034c33.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YiKy65LqAdYe5%2FCn5Y%2Fns1cqJkYtIjJeeflugzJ7peqI9hLbpTuoKZDZMRimuQ3K5EErK0jMw88x0U3c1XTWYbsvyHheT8VrQ4jHb%2BCk%2FMlrjD7UDaH6iVRRyGYdQBInFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 182377\r\ncf-ray: a07a1db12c2b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03a41ebfc2822966ccc84b5f11fb4f37","sha1":"8a03e5c17973d563e27d03be49e710e14c70d862","sha256":"c6c3494d6e8ce461c4d7b6d1003a9f6c5131d4bfbc81150f033713cbd161c50d","sha512":"feef02093801d484436151ede3a28e4a652c7614aed8bd49972100bc8e7fe24d276415b4be84c6bed0ba871af142c1ca12d405f8a7fdb2d43f9820dbcefc3a62","ssdeep":"3072:ReuoArLIEpV1NVfhqB14todZgaqt6eOLZCfBEunnFvrQbOPPFp8+AjJZP5o3mCoA:o1A/vfh+1Tiaqt6H1KtYOPnaNg3mQ","tlshash":"5204122892bed919d2d85bebc73d50da380cdac3ece73623df162435640c9d39722666","first_seen":"2026-02-06T07:23:24.025684Z","last_seen":"2026-08-05T14:34:14.25321Z","times_seen":9286,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3585-1a2341a418cc0f3b.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3585-1a2341a418cc0f3b.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=US6UsMTH%2FW1JvoT65Vy1UNdmVyLCQwEi%2FXzXx6%2F2shXERV3IOzsixxhpqort1EVTqMgfCQpm7lJe1SQ%2BwwY3prqVOoMt07TXKe8EB3QTr6GtpA4nFZW5FFf3YsrA6AgtwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 111886\r\ncf-ray: a07a1da3b8e22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376596,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d66e895831146a3fcda6c0de48e66fbb","sha1":"ed6c9b6bc6805e7a74c90c2f70040a22a7c0f9e3","sha256":"ea60fb56fced9d92b0247021093d020a5438a67c1084d715a587c598278a804a","sha512":"6204b75617d69a9c649c089283b8fff6285c43d78b07045799a230225ffec878299a45b73c0b05a85a83ca19874e7de30333065e46c981d3720790649ce965c2","ssdeep":"6144:f9gGcm/FTmn65dg2/s70cs6eWBsY6EHNfm5Dlf3+FFS:XhWwKNI","tlshash":"3b845b98725060e8a28762b9552f154db33f2578e02ccd14e39ac87c7295ccce63bfda","first_seen":"2026-05-16T23:25:48.549118Z","last_seen":"2026-08-05T14:34:14.232823Z","times_seen":5933,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/19-5bece4aba82fb776.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/19-5bece4aba82fb776.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldNy%2FYtzJ00Pl5XKAWWq88w%2FlMxlIYIWwmJUYp7orJNZdbkwQdIRDiVi%2FL1NnGKbV5kN7Cvz9Bs3ApItnXM1ubzUVKtB544PLCUzrMic%2F5OPFjhBl%2B4fiENjd6kCfZldtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 347128\r\ncf-ray: a07a1da408fb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":936675,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"499ae782218e46ba0165104a99a4ba64","sha1":"dd6335c8003db8dc40f3b6e5fd9ec389bd5679a4","sha256":"7930fcc2462bd18b8f3559392d9d610cb2a4cf2aad270fc533012c2fa8560ab7","sha512":"71885acc13827a064e0430afe760dadfaf8afacce9f7dabc324d265d126140a62d9baac56cb09e1725cfedc955eba79c0828bd9891ee524aa7d19448c1557aee","ssdeep":"12288:EW2sqZNSN87vIomx0wgH+vVWQo7AN3zoMaaql++gWuWUC4Qj8zINa8DPeo7B53zW:9NgvIh/VSUVPyzLW3fxz","tlshash":"02159459ca6602fd7f586c81ca4770698ed282136fd78afcdaba7e1447b0adf0301e51","first_seen":"2026-04-13T13:34:34.636004Z","last_seen":"2026-08-05T14:34:14.23667Z","times_seen":5992,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9564-0cf3b4f099c86954.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/9564-0cf3b4f099c86954.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUzUJNEyr1MZ1ucDTH6nyhLIhN8hE7TahbRC7QxxAihkZVNPGjmhO97cc%2BdnDcXL5eQwQ3VJpdwB3tNDzQzK3HQBq%2BTbmAZz3hm2as46JgxsqUUDps1NYm5ExOc6agixwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 18103\r\ncf-ray: a07a1da459182efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61557,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57043), with no line terminators","md5":"f1133f31f38a7764ffc9bd1b3df097e8","sha1":"d5d2b6cf4dec8e50720d6754d015bc4736f6c72e","sha256":"5aec2933ae085f9a1203fac9a6a05a2dbbb5a4e92ceb66b1124084dae588afbc","sha512":"abfc85e1473134449c3ebe247ad09931b39c01a2b43e65ed5f863b30b2d791ee25b24d9335cb778771683c3ba87d996ddbabd6668d089e932c3e8d57d92cac20","ssdeep":"1536:sAvhk/n1ED3wnpzktrXFlnEA8aqLE4++E/NL7:sAv6/n1cIzk9FlnBCLE4++E/N3","tlshash":"9d531c8cf3d4f2a927e670ba283f1c3bd12e7a34971990645794e6b42549c885233bf9","first_seen":"2026-04-25T11:58:25.658808Z","last_seen":"2026-08-05T14:34:14.23397Z","times_seen":5979,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/css/d599adfe9f648657.css","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/css/d599adfe9f648657.css HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TH8%2Bu43iXmZrHZCnIZLcHIPARK00cZYP6vepuy8Ygje7L7lNcsvLcCy9BeSM8gqLbXrfb1zbpOC3DRsqOSDHqH6RSOrSMSvYvuz8KJAL5zFg2QGAiGmxnT2yVVeBSBZUJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 12193\r\ncf-ray: a07a1da118662efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68963,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"689d6845a37e6a3c96ab9a76cf8f0420","sha1":"2930484cd58c8e849674195c73059425e6218d6a","sha256":"619447f843bd1558d398fc6c6548f2802566678eb7a6d1621fb2aa0b3c2ab977","sha512":"a467b0712c19a7d4866dee41cef2013cdf1509ee800a86860377e0eb4b217bc52a8d21a57b5695cd1be1fe81211ed007ffc07bbd6527d6a55e378eb7949c1265","ssdeep":"1536:SDzk2iKelS7yUAdO3CmoZV/AdBN/dilkbP6/4Nw9cXw+qicehzXu7VZ:F","tlshash":"1563b8715378f03cb977a82375819ace706dd203b97366dee5a4b43a80c76933a2274d","first_seen":"2026-04-13T13:34:34.644587Z","last_seen":"2026-08-05T14:34:14.241855Z","times_seen":5995,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/4577-b61d38b6b034d783.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/4577-b61d38b6b034d783.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YA1sB6aZFczD%2FX5fJIK2%2BMlEd%2BGvjICesDeWLPjEQGhi8LseR14B4e4fmj7Z3vMCQtoKK8QWy01%2BGvhS9Eoi7tHUDniMuE2NbeNq5EEKBzDf7%2BOs%2BjrqwL5X3OY%2F7IPQsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 612001\r\ncf-ray: a07a1da408f82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1365565,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65494), with no line terminators","md5":"e6668d8af07f665bd6a728ea389b8445","sha1":"b44451db9a442a5be3cd3e428eae187031c8e6ff","sha256":"d66d82d7f23df37ddefc4a74bf15ca47b58e44f24171b875bb7911b865b5f17e","sha512":"cf413d7f97c7cb9a5f47be1f6d015d3cf6e0379a70e3d9e9d649a4640fea030eb4c6855f792b9583bbc963559a7a9fdcc8ef8febbca7e5d9a1c814a5ba722b5d","ssdeep":"12288:GxIYTLljXNW4D93yq3F/1hWJ24cvYkwl/eH3q0kCwI3UxrfZfM6A333xJUgHAsA8:3/cpXlKxUvBIVV/7x6XoG","tlshash":"4825601c8e6641edaf18ac81ce4770658fe2c6422fd785eddabbad204fb018f4351e65","first_seen":"2026-04-13T13:34:34.653552Z","last_seen":"2026-08-05T14:34:14.259203Z","times_seen":5969,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/4310-53eb2d994601d39d.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/4310-53eb2d994601d39d.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5DNhWLPChgUy3GWCHtjNot%2FZHDhjld2KKqe8wwqHmOxBm12ann%2F6K5wWYetzhbWcYm5UBOQq4YQpoKXgCgScUEKb5hLDwiP1Uu3JovOyDAG0B%2BPWfWykbGRHHPA1lKD0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 46835\r\ncf-ray: a07a1da4390e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241653,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32948), with NEL line terminators","md5":"29d6ea8f8c4eed69e76b311812e78320","sha1":"bcac93e4e0a7fec8285bb493e0d6a49c7f6acc0d","sha256":"a01af0559e56e908f049ad917859a42c6c460a86ace5fbaa89870667a99b7465","sha512":"9a7a9ed95870402d6c1d23f39e78dad4eadc7ffcbbeac33e945b489f773709bcbbe52390881d8900dea72bc3f5e2a283f3e704b75892387fe86aeafc66fb42b4","ssdeep":"1536:KI9xSoN+NFCwZ7qEDTssKaUezaPWUoZ7McSjr0mJo46W6E9TvVWqnEbvRS:PSHoE3ssKaFmr0mJo46W6E9bVWqnEbvY","tlshash":"40749c39c72a73bf4bfa309829e43bb5548a5635c3d8f7dfa1a071694087ce5401daac","first_seen":"2026-06-06T20:21:01.782397Z","last_seen":"2026-06-06T20:21:01.782397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/gb.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/gb.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFZHBTRN7bq3Fn5z2WDd0JdZS%2Fx5eWZAK5yhQcH5ztZylDysQNrEYXvLOp8UI6CJ7T6GS4NB6tI2mkVy5LwzCOO9654dzGUQS2q3wIBycm5Wjdr2wPATJzpDbt0RYTdJKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 659\r\ncf-ray: a07a1daf8baa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-08-05T14:34:14.240712Z","times_seen":13471,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/mix/landing_zeus.jpg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing_zeus.jpg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8Ohn52e1%2BYhP1SS59T3bdOBWXqTq5A4ALcBFT2eLjy7XwnyZ%2BMf8Mc%2B8ksGBzFXweiwzFSJZCoCHjMxjOUbFGe%2BvGHxZUXAM31u6Fv2ZwFpjP6XBUNX5dF0y5hCOMAaAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 179638\r\ncf-ray: a07a1db07c122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2368x1028, components 3","md5":"28ddcc23e4d8be01380e65e823904d84","sha1":"fe6cf680ed934ce00bbff66393dd076b15184486","sha256":"ce31ce6181ee64d6d05347285c6b04765859159285cfd706b617e02ab2851839","sha512":"375fd38d2afd987610235da2f48799220b401b999f012bef5d83e079e3f6142bc425d5d78991f35c8df66c88999adbb165399bd5887da34d9e2c9c495d7d327d","ssdeep":"3072:PpZCDctONi+s/9M9EpUdbnP7uAj0Mc85RjRdr/qHrDIDzyiN:L64I99P5InGjRdr/qHrMDWq","tlshash":"001490038c1c8b97e52993e4bd530dac2f592b5ce9813aff05231ecb7e645265dae01e","first_seen":"2026-02-06T07:23:23.986859Z","last_seen":"2026-08-05T14:34:14.260721Z","times_seen":9285,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T20:20:05.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 20:20:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx; Domain=.yumwin.com; HttpOnly; Max-Age=2592000; Path=/; SameSite=lax\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFSKRXS331O3fUM%2Bz1iVi4tiOnTs2TPvY%2FNTiUcqZcCRlBaOF7Hjxh%2FSprec4UW9zJXuqQV3T5jIj0lDWpFw4yU6rXgjb2MsBCu6zgOBZMEdTyszXZThc0sjj353qia4Qw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a07a1d9e7bb9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7151,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2283)","md5":"cef4867f46d657dd497e95d45f30a5be","sha1":"4f2a5086d64aabef031575c84214750aaeddc51d","sha256":"180c4db46d99bac8fdb9aba008793ef3e601438a09f5c8cb3dcb931e3e69031d","sha512":"98fe114250324e2b9a81c86fbcc8aba368b84af9bc2af4b5ffaefb45d8d4d0a5aa5f9845246788aea1e8d890380152ef31d903af025780d97114e88034fd1b7e","ssdeep":"192:EUB4BfBcTfnx1peUbTu5PJR2ebSwdg7FefSpGB913MCqO:EsgZjkq5PJRaDFU","tlshash":"80e194b36d04993a07e78fa838e7224c9237e1468878ed95ba444c6f01c57f9c477f8a","first_seen":"2026-05-24T03:30:07.288602Z","last_seen":"2026-06-06T20:21:01.785326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":53,"dns":28,"connect":1,"send":0,"wait":161,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3715-1862ad9008505962.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3715-1862ad9008505962.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8FLy5WZQ62nVwnCS%2F7vME%2BV3CMkL4K%2BeSnYWXp727P%2FOwgPY1tDg6V0axvE8AaMFovbP3oNH6nXZpX%2FRZ44TFQM32%2FrFlRZczGgdyYQx9jCraP%2BfbdtDiniDVCDpGuiQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 21211\r\ncf-ray: a07a1da449122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81522,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480), with no line terminators","md5":"2927eacb55a6224ec8cd6caca3db99c2","sha1":"a2bad0fd2d18b815ca48407464d6402918345813","sha256":"08f764ea42a0be91df8df5d26c417926f70a6721d2ec38264a3a28f13a98f974","sha512":"a5763ae91e2fbd84c6843f454a37179ae3083d4288200cd9570e88eaf655d5e1dfacbfaa5feecc671ab867d991612ca4464fcbea23a406e706e19799d9245a69","ssdeep":"1536:G8iMZeCMcsspNYlpAsz1jzsRr3KTArL7ml1C+Rmsqq99WsA:JiQensTQmYBLe","tlshash":"6683c764f1e0f6d4e1575399c92f460df12f2eacea25782cb3f5d818b7044d8622eba4","first_seen":"2026-05-16T23:25:48.524516Z","last_seen":"2026-08-05T14:34:14.228312Z","times_seen":5932,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/fr.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/fr.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ucBOqSbf0ysdnX2TcdJkIWe6eqRFE%2FHz3KM07zagay9u5sRvOCTnAOr%2FG9cCn7RVu9ia%2Fob0wiubtP73pFpZxvVcdozdDeVaOgKSg41yTXgly0%2BJXfIQy%2BYw5M4NjOTXg%3D%3D\"}]}\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1db1cc492efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1a36c711f0ae0ab46c7dce06f63a723","sha1":"5cff6743ac6eed2912288bacd35c363a2d586d18","sha256":"861059eae96aea4c38466209edfad68fbd84ada37bae4ccac92d03011046a524","sha512":"e8d4869bd8d77613770a36de15c23dfade7a3bf3a465c4a6c79be55d9d6660874b5cbb60e631f04964840d3b4d736ceb25f31b30779e8d5ec64023f8e855cdeb","ssdeep":"","tlshash":"f0d02b9dd07de0c448138b703fde31c1418a6326364600dab047272861cc3ef7e40f04","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-08-05T14:34:14.262185Z","times_seen":13203,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5917-a224ed597077810e.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/5917-a224ed597077810e.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDZcx2ldv1g1e4Z7%2BYUjA8NPjnIw1n3iDRdBlOYCRDAb1LDdMCg%2BX4Ofik2qmaXNISPVnFQYonfUxDtJpV9dc%2BAbVviEFfaKfjMFy7nWBJRH26J8hBF5CX5DpiT%2B3B1KLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 92212\r\ncf-ray: a07a1da4290a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150596,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b7bddafed581eceec94ec11722aab006","sha1":"64491aa8988c0a2e1c97444293a93815348ab5fb","sha256":"1b2f85b82922c6d3c27ec4d61bfb76f0d91d8f29d7f745a3324e47bde463e316","sha512":"ab07e463530b61c5d0d6c44af2c599d7d44c43642cae0c84586b4c37c0cf1f62ef1592e8cdd2d634050433c57169e9dddecafe59da766d6192a3cd2ec642c9d1","ssdeep":"12288:DkmjKxHLIPrsjbDcvnTJmP0I8y/PEg3Ahkz1epv3BoKuW+xMQT1y5EVNy5EVIS33:u","tlshash":"87259b4987aa42ec6f9d6d80c607744a4fd69513aed789eccbf9be1013b0ade1311f42","first_seen":"2026-06-06T12:20:43.16566Z","last_seen":"2026-06-19T17:09:20.105491Z","times_seen":1348,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/api/extra/pixel","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.yumwin.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=noktv5T%2Bu1jZe4vH%2FEhiNP4YQ3ji3BAaIz9b%2Bw%2BaEBw8FacRvUlie6LdgpHXCYW8KldsOyZnnARvTcoOI4NF16fLHxCgjzjfM8JAPopHsKWj9zulxTwAVyKJu3zTsUCblQ%3D%3D\"}]}\r\ncontent-type: application/json\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-ray: a07a1dae0b2f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"428647be4acae0d85bd0799a59237001","sha1":"25b1dbe5aaaf5fe53a11fdb05fd14bcad3e92ebb","sha256":"edad519cb99926a099d84224b6b7427bbfbaa60c6ecc1673c039a0723be93006","sha512":"8ed0b8ab8b00e7883301e4dc47e6ae3c38abe1686e6de48d43983fa8105203f86c36b86cff1a09c9bdf9406ac7c4ac2f8b6a8654a42e1b5d03d843b5085428dc","ssdeep":"","tlshash":"f4a022c30a200bc2cc00000008203b22eec823238300022bc00c0200caae0fc30c333e","first_seen":"2025-06-04T11:30:16.150294Z","last_seen":"2026-08-04T15:10:07.435909Z","times_seen":17456,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/mix/landing_girl.jpg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing_girl.jpg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yumwin.com/","fqdn":"yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"69.67.173.34","port":443,"asn":30295,"as":"2ICSYSTEMSINC","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T20:20:05.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 10:14:54 GMT","end":"Mon, 24 Aug 2026 10:14:53 GMT"},"fingerprint":{"sha1":"84:A2:B4:22:8E:E9:A5:AB:10:E1:9D:EE:BC:A6:0E:E1:14:FA:6F:23","sha256":"64:61:22:43:E7:C9:80:0C:BF:D7:6B:9E:46:D3:B1:6D:AF:13:5E:5C:45:DA:43:96:DA:3F:D3:13:FA:D6:21:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-store, max-age=0\r\nlocation: https://www.yumwin.com/\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\ncontent-length: 0\r\ndate: Sat, 06 Jun 2026 20:20:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":7151,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":299,"dns":20,"connect":131,"send":0,"wait":131,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9689-39df663debcc7932.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/9689-39df663debcc7932.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N0dHRvt31f14dxc0s0j6%2B7X%2BPRVpn28od1mq9Jo8CzRkIam4FXcxf6bbZdCmJB5yAeYveMynXl8qTZJ5A2ENuRgz59LToM4cl1RPXUG%2FQeZ6mRZulCh2GRGlyWZZsOzwKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 899191\r\ncf-ray: a07a1da429092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462413,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9db46b5d4b739ec66f2a1c0b604e8f70","sha1":"c1b081fba22e6c0500021767d5a384f5464506f3","sha256":"43946234d264f14d2be22b5bed48cebf1c0283592db43db6fc888a07fd429a6e","sha512":"86e1f7a2294ad4475369395bd9e42aabac53d2a7defead470c705bfe7236d9507636842e05bd60063e952cbd2c29ff4b307afe96d76bd9e7a28c5de84e141513","ssdeep":"24576:7tPaAKapUMi69Q86f4lJay+AdFYR/QNnBKM7x5AKGE51:u7KwNhQx6I1","tlshash":"7b250135da2552fda728a4c2d58b34198ee685073fc589fcc9b6bc464fb2ace4701f90","first_seen":"2026-04-13T13:34:34.637603Z","last_seen":"2026-08-05T14:34:14.259691Z","times_seen":5989,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":399,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/gb.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/gb.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDnjmF1W0weKBIpDHmEotld3xja5YVINSkO4LBv96%2B7zDisoW75z69ldO51Ux2tcmFvH8tW4fFqqD%2F7l63SbTs7u3YQOrudCLaWs5umNbmDIc2HyBCpJcI01Ydo9p4NT8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 659\r\ncf-ray: a07a1db0ec1c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-08-05T14:34:14.240712Z","times_seen":13471,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/landing_block1.webp","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/landing_block1.webp HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/_next/static/css/10dffa892f034c33.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snBsXqlv1wO1pbjKQLv%2F1gPGhj45lBHS5EUvsnDyLB5u6iAlG9HkXoNUbX5OcfhyZkVrWIN7%2BVBsUgocQ7qemWCIIvmf4SVnQ1dyatdZFkTE8lHFsInhItgVttlMOu%2Fh1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 143257\r\ncf-ray: a07a1db10c232efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1692x502, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8201728c6e2cf2db0d1c3c296e9ec4f8","sha1":"1c5b38584ae934775d0ec23c9b0ebfa494bbb8e7","sha256":"308e698488e68037d3a4648279c289467061190da02ace13bddcff1f7dfb24a0","sha512":"76993a0e63c176ce55b170cfbff41c65712a660f800904f7ee54e504e66df07343bbfe33d810cefab3d7e959046e5bcc49685c1d82259c5cbe0d30902ad16923","ssdeep":"3072:jvdXxTC52KjJbmSFgMLRAQPodctih7E4opiSOVmDjXvzV:jVVC5/mAtLRoctiREXpUUDj/zV","tlshash":"3fe313be76b10ae8a8801cdf021e48b97f355f1355ee01c67b27a68f05a3519b5cdf0a","first_seen":"2026-02-06T07:23:24.023009Z","last_seen":"2026-08-05T14:34:14.243029Z","times_seen":9283,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/stat3.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/stat3.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUcacsAEawAU2ncVaiSFK1Kb6eeCjvQsj36HPqVGv3fYIe28jOKbapFZtgtKqCvr7KG80swIHLUlXjSPKD7DzS0VZo4Nk1VaVkvRP2US1WpPSbRcyoInCPTKxCSCmtAGiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1945\r\ncf-ray: a07a1db11c262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3827,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b07edac84752d7c56e382e1f7656115","sha1":"1ab72bc6895070dc7d55c8d87d4f4f907c19c019","sha256":"979df951bda3030c2abf6f6508fa7d5914c95535e4c0ed1f20a836cf2857bcbe","sha512":"97c1a7ff703378b6ae5555c686ab628ac9387b52614d1144beb72d575391ae717a0e25c981a4de8366948338760c57c8a8c19913f1d8b37661a2e96c1496af66","ssdeep":"","tlshash":"9a81b4ef5fd402b4d889d3e7ee3214993e4360fa5a8a0d04f36cae89575585cdd1a8c3","first_seen":"2025-09-28T21:41:24.193021Z","last_seen":"2026-08-05T14:34:14.252669Z","times_seen":11668,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/footer_support_girl.webp","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/footer_support_girl.webp HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/_next/static/css/ce4a94f3f717c248.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMPOMo1A%2FBx2tFi1ym1wnQf4EJRn3yGp6qRSJKifF6e%2FYfycfZHTMPIsFlHEKETVdR6v97E%2Fu6qZL%2B6jB95%2FXIvAUFs1Pt2jQIl3TAjiQ%2B0iQzDO%2BF3DFU46hxOoYmWdAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 57854\r\ncf-ray: a07a1db12c2c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5faac5f71c2e22c65bc69c285c0d3696","sha1":"fca1321d83571cd8e5cc3675251b7b1494657524","sha256":"9bdf3122176092018f424668f17ff2671b31372edca458b79c74cd9d499098e3","sha512":"2313bd524395624d329705b1f80dfbad7fe65729a4b5e02a2822ed990a6f9b0d78081b08210c70666d4b6076827ddd27948179654db24209eeb65cbe2ac9a5ee","ssdeep":"1536:MO09/ae5eKf1sIYm1Utg2OTeeydxh7F+euCxPO5U:69d551srmOTOTp+b3xPIU","tlshash":"ce43013c7ae9b930cda1243a4325ddd59c20c652f80b346abf9d86907224d7c9fc39e6","first_seen":"2026-02-06T07:23:24.013748Z","last_seen":"2026-08-05T14:34:14.241283Z","times_seen":9286,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/de.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/de.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3121-84e2be85f77396fc.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3121-84e2be85f77396fc.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0iriDMBt53cyxLMO9o21iJEERApPrtQspHW9NwdbTikkBtHpJbpK1jJmJTrJgg%2BWlt%2BN1vGdj5sCYRBRhFgJDA6CDn742b2g6vBvP1KitcwrdvU9zLKibYUoW7Nf5eeXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 56586\r\ncf-ray: a07a1da3a8da2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224282,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65418), with no line terminators","md5":"6b869f389beaf6b6ee305c2aba742110","sha1":"616f5957c5c11da916d8ffedf458597b7612b071","sha256":"ff0cef3d5e2eb5fd8fc70bd3af62141c28494e8218ca265cf9a5e5928df7818c","sha512":"9ddf70d0dd79a02c44d6a335d5170723a18ae5b4981c674756d69075f92eec44f398da73f2145878630de71aafa77e6da60cdb26bd138667b448dee4d3b1582f","ssdeep":"6144:A+AiF7KKW6WUSoMtIn9Ghv37xQnp87m0Sw/KKSUSOYYMCI:lY9C","tlshash":"eb242b497290b2e817e762a9547b282ef22f7d3cd222691477d4c87c3349dc8913af9d","first_seen":"2026-05-16T23:25:48.532058Z","last_seen":"2026-08-05T14:34:14.224869Z","times_seen":5933,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/trumpColorDSGN/mix/preloader.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /trumpColorDSGN/mix/preloader.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmpV8cGY9AZhSG8zdgyPkmvlD9n28%2FPNE8KZVt%2BrUPq5T8DREYIdZipa5k5XHTr7%2FL3Q2yA80gu9GmeiCwR0mcGiapjjWHK1p3zZUoIy6l99p0kQbrVvM%2BDjzfJqURmohA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 38904\r\ncf-ray: a07a1da108622efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119318,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40fbaa8ff12ac1ebf23154c29e67a191","sha1":"a0a3a6c3b2a35874dca992b65fe8651809da05a6","sha256":"234f1a89ac1c64f2b60e7b7aaf30d3ec2cd97acd3f5fc844f4f55256eccaf843","sha512":"5c97f0bcda3d832001d8b751d6140ba2835b2ad34989ee6c4e9b44211dc8dbcb099eeb28666d6555505235ea97f71d37dc7c1a19e62c3a98a0cbd64e3c698ee8","ssdeep":"1536:objgkWcss2wEHMgG7RPP1VLatHLKazXxzP4D:TCB","tlshash":"edc360fc1af062cd88c0c7d27f69d2b93c17a3b798580805e66c5f5c0b9a96da851bd3","first_seen":"2025-11-16T06:53:31.134866Z","last_seen":"2026-08-05T14:34:14.232272Z","times_seen":23800,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9338-742398fd846a71c9.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/9338-742398fd846a71c9.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZSIoQrz9QTzoBBPDs0znWy7Nh1bF9pIwE5SbZbxWDukT7a4kL%2FgOe6YpuJh0cxamA4Jl3ZPCsRGB0fNdcXycMgfgqAhDoehUGYoFhPcx1bNYTqMNsrM1slPllr%2FaQIR4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 253412\r\ncf-ray: a07a1da4390d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139216,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65360), with no line terminators","md5":"2b7b624a172740e15cab5bd742b040bb","sha1":"da4b4cacd38c8411c2757bab503b1e94d1387a7b","sha256":"cb81d12e10e97c97c29822437065aa8d5f2d0f71bed71df7e3b7d0125748046a","sha512":"8bf9e5dd6e8f41fc826a2788a73af7606876d14264892701adfc106ded698bc0b49037f06f9be77334cc5b34d939e305d98a4768e334e49b59966afeba39efe9","ssdeep":"6144:L+pzOk0ScZvzdjztsaAsU3Z2apIqOl4q58oLDmWNiWRSMGiLAlsrJYtkAgScxmPQ:ypzOZxRLLD3iWRSM9LAlsr1TxmBY3g6","tlshash":"ca25a456008827922bb37695269bdc0fa41ef12cc743c465b692c57e26cddc8a27bfdc","first_seen":"2026-04-13T13:34:34.662133Z","last_seen":"2026-08-05T14:34:14.260204Z","times_seen":5903,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/api/extra/promoIp","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.yumwin.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVZ1ZATHrI7B3Joeid6ZfDl%2B9hlO22Lm1aSi0umZXOT5%2BUps0oAFN6yGzkupyVoXW84MfAq%2Fc2u7ULC%2FkY0BapiFKX6v5N5a%2BvB4iqK7%2BSXReDl%2BKVnpMw5ZsIZHMfk3Hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 16\r\ncf-ray: a07a1dae0b312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-05T14:39:40.025888Z","times_seen":180092,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/fr.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/fr.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/css/ce4a94f3f717c248.css","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/css/ce4a94f3f717c248.css HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWUTCSath3MVxHb9DZ6%2FFJYwZFzS6YsgQmXEtQzzP1TRRGdiww%2BwOVmbZESRKmjkx6a0UayE879isKtyX4yXopyy9vIqurVjy%2BG80IAFviUczvuAoE7KQMTOUuXT76eYfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 5672\r\ncf-ray: a07a1da118672efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29159,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29159), with no line terminators","md5":"46ad4b92478a51e4234fdd6d675c9f3a","sha1":"649d65f39d1733aa5d13bb1f20e773e089ba6620","sha256":"8c2a5bd34c98a97841f128779b43cb8346f7ec1a35adefdb188f32eeab45bc67","sha512":"0f77212b79bb5fefe13b10066fa75ad94c9e4308f9bcfb246d77d96c9b67b6a442ace7fbd0cadd1f6dbc3f50b0c7418b49733fcded43b1bcb81459b605492059","ssdeep":"192:+rbxEXPgGgaxVOUzM6YLWBHo1Vc/nJdcdISbwWCnZclaumSgGBhS6lPxT9nqhC4M:+rL5UzMr0IgfImKwYAMRfmVnFI","tlshash":"d2d2a432a124d13cb8b684627e95e7de7058c203da7756faea41e52dc0df5e33b62308","first_seen":"2026-04-13T13:34:34.624049Z","last_seen":"2026-08-05T14:34:14.230047Z","times_seen":5996,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/8824-ddffb509a90576a1.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/8824-ddffb509a90576a1.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLZYZ%2BhfQdhTkid%2F5J9mu9EUj7tMhynAoQgB7zC0vOt4Pwuf7IKKnawWbBtA63TcS900SCHdc2FWoTNwMr3fPKrVzQJm2c4oaAjTqqUvbrwF%2BkRCPcd0CKJPjpyDsC6gqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 205429\r\ncf-ray: a07a1da419062efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492118,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88138b1397ee14b04ead267aa44c4196","sha1":"760b927bacdf81d73a0f2084bfb3ce7a76478e63","sha256":"a2d07d31470b51490786beb8167c7fafeae5a0236cb44537c4dc8857b3c448ce","sha512":"9841fadaed80aabc013a0fdccff0b1356d14a06a2952bfc883dabd299aa5fd9a4369b504e8ac7d28f47c27573be3bb4b94b08d389d3836697c2334185931304e","ssdeep":"12288:3fB+XoxJuhu/v7uV3rIPE8zGglvb9hsm8sMQMNIYsUKwJAsTF4Xylyz+hYsUUIJM:vGgthhsnR0yF4XylryF4Xyl+","tlshash":"94a4be69da7112fdef516ac0ca177015dfe6a6936fc789e8caf6ac040bb05ce4301e91","first_seen":"2026-04-13T13:34:34.606306Z","last_seen":"2026-08-05T14:34:14.257129Z","times_seen":5993,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9796-477f833bec802edf.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/9796-477f833bec802edf.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfUSyDQ2N2Mrco3Q4pTDrqXTlw%2Bf9KzrKiLMqD9WOLqMcJ80FRmuxsh45rsVi1mQWK2adAaVHvo3N1nTA6nvVQHa3SLtycq4KSP66df4xG5hT6jfon7GX6%2BFOKtZjw8V5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 30594\r\ncf-ray: a07a1da459132efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261678,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3cd700563cd8e58c974d39b5117025a1","sha1":"8adb06045734081c226292a64b902365df367e22","sha256":"92c3493cdd4b2f4c088fc3c1aad125fee7a6efff6470de708bb5363e2c2b9e48","sha512":"89bd514505d7f05dc1d6d9124541bcc8aa98cb80bb21ecbf2ce07e05c4f9767ed6ff1f2ce6a99f5a994cdc9801fa416e5d37ef0bc5c046b18d4eb13df3a033db","ssdeep":"6144:cX68qDg+HzhjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcVQoDMEFilOHIUJW3bXlB/C1:VjzH4Bs5ivB1hPYbRm0XiGwgwKZ7hmcJ","tlshash":"eb44101c8f7242edbb187c80ce4770698be586466fc784d8eafb5d244ba05ce5342f66","first_seen":"2026-04-13T13:34:34.615711Z","last_seen":"2026-08-05T14:34:14.244723Z","times_seen":5992,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/4212-38fe49b6236c7c6b.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/4212-38fe49b6236c7c6b.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76LCYD1aZd%2Fo0wvzaSiCGFfDrWLOG0qI%2Fpy2P2c2NS11fZFbw4VWHPxpF6aX%2B0qFmM8v9srrO8FZs5NfkJUX2TJ97Y5F5wQ7bJUZ3zWTyoYnAyCbA%2BQzgcFjbAdil1KN4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 29928\r\ncf-ray: a07a1da4691a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114414,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65440), with no line terminators","md5":"e1ee028598eb24e7427f83baa42198b2","sha1":"29ecf0ab8deb78392a4121a31e2fb63c764ce99e","sha256":"108693690d6f21f1942f276dc1e12eef8524ccb9678e1faeda902063ab3b2f0b","sha512":"71bd29cc66d0adb5ad11cba3d95baa883771712afef080e8b1f7a9c107dd9beb2404a2c43dd616aaf717ba69cfd4786e0c801ff3d88b6d201b8156124535fbd3","ssdeep":"3072:IxvuXFqhT8pi01EOUIMdda2zZ9GFOTASOeBTny//G:qvmFqh7MEOUVL1TASOeBT8e","tlshash":"ccb33b9972d0fd9d3bf3946a8c1fa40ee2795c2ed42d710462d9c83c72599c8e136bb4","first_seen":"2026-04-13T13:34:34.631899Z","last_seen":"2026-08-05T14:34:14.245295Z","times_seen":5992,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/it.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/it.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/de.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/de.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ydtql5hvw10W44lHYGKcpdFairE4LynIXiSxj1DiumhwBvRCGYxrP%2Brat4kh4SniSaxn1Hhd98jfiSlGpWd8cHM71R4fAnOaKP1XMIyOS%2B%2Bhx%2Bo2jXuq0BVAo1436sUslQ%3D%3D\"}]}\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1db1cc472efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"939afd91bea7074f84f4a328ca095295","sha1":"1a8edb7520cb812fd35996134ae823fe8ade03d9","sha256":"8e3c8f938c6fc4fc97c81f398a71d0d789b44b6be458469d7056372a2c05837a","sha512":"a3922e78b9ac5209cabea2c0945d474d24035a4e78297b3105779cea945b931ae83a59ffbf73e2877f2da42e0ff7fb5f23c297c1d7f7d09da3644ed63d82ef6c","ssdeep":"","tlshash":"c7d02bd8506ae8c04d16c7603e6c32c1288a6259238800dff0835338a6cb7ceb745f50","first_seen":"2023-07-03T07:07:12Z","last_seen":"2026-08-05T14:34:14.261708Z","times_seen":13193,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/direct-router.bundle.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/direct-router.bundle.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGy7WCjjs9EjwJzfl8Lkh4VGiNuHVNQuzFJdufqZPvZ929kDfZ2%2BUhQzKMoOoUOuixTCg4c5lVEHWtMc2%2BXz8%2F8nFMh95pLEdKGhVQISZkvBUEmcZhUYYiRC8JtXASmz8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 66432\r\ncf-ray: a07a1da1186a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220065,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b82182c1e759089fca0e71b443ac881","sha1":"82cac2102f3d4b4162c42cc47de1aa3d6fcc5b38","sha256":"d1195553e64a02bc8f2cb2073233ed0ca7344751b3564b531962040be8206d02","sha512":"da4e0495fedc2044499fb46bcc00e3e30d0d6db4b880f215b2a6f36fc64227434d7a9029eed13ebc01ba99f1571dce449fdea108dc4e08b922dc39693590d032","ssdeep":"3072:vqSp7BygEFCXqLkT5vd5XnTWhNIhdmkIxWjlP3/1JqobevmMGWR042:vqSp7BZaiv/ukIxWjlP3/SmMGw6","tlshash":"22241aa93a95f1226ab3027310df5803733d352b280d4d61a511ede9b4b845eb17bfaf","first_seen":"2026-06-06T12:20:43.1911Z","last_seen":"2026-06-12T05:22:58.557654Z","times_seen":30,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/fonts/proxima_nova/stylesheet.css","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/fonts/proxima_nova/stylesheet.css HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/_next/static/css/d4dbba7cd4889f6e.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DC0YgF%2BXG0rYhMPrQlFRwitiNOXmmsYYBavVjRY5VWSDoUCVFMCRFABa9mf7BPOjiSAt4D5PuPVJabUHxqKn%2FI%2BK2fc2SiMipgrSiWKxwVCfnSAjNBta9q%2FdMAvsKJEbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1497\r\ncf-ray: a07a1da2489b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16511,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d8931974e63a4dc65335827a00484a23","sha1":"3295703d542b291d258e703d3fb273aa4e71472c","sha256":"5748d69fa891b81b4890fc30b6c589852acd016cc7f8726e4ef93a497f0ee30c","sha512":"a5a858b0359a3571aa1337351eebcbed993af02fc1e9f54d7d87ce39e675d455c46fe9ef7291fbbb80d29d79dc71bf2404e40a902f5ee26fc0187e92b6625cbe","ssdeep":"192:xz6b6dlmqgqYGVNCGAcCh2H5vwCGmhRgSem0pBjqkCY9WTpnOPx/OSW9r0tZxjyL:paG7KUC4ZYCrz2muZHCfWctAH/uNB22","tlshash":"36723942cccdbc624aa6148077fe6ff60b4e28559079ad57ff3c38389d115adc68472a","first_seen":"2026-03-07T05:32:19.76436Z","last_seen":"2026-08-05T14:34:14.250568Z","times_seen":17378,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5709-ea7a4340808316a5.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/5709-ea7a4340808316a5.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OupPjm57cuD1MgXgWgcfw33y6cWwNv4JcyxJ%2FV3lCL2poG%2ByFlfEF06OECTUmHomy3nbYOSBqKh1ZAjhvNEWUBvBbO2qzqG%2BUfQzSgcIfu0JtvxgNMH%2FmWeQLkSJ80sryA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 364325\r\ncf-ray: a07a1da3b8de2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1454652,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65474), with no line terminators","md5":"002b1b788ffa98d8724b72d9aa9fcb1a","sha1":"881fd6edd5d808d59f2dcbd94c7ab5bff158106d","sha256":"6e3f65939150c1015657f003add8731c6078c3254ef6dbb8e2d900bd65b9a7d5","sha512":"a19f3e3c76a713b161e379d5188bf4ac7419751a0cdb56f5cb1ea6736074cc36388034a74afee5355c48c9f9d34281401eb89202cc23655dfc81a87be7049399","ssdeep":"6144:7nRjnRVLWQzV/oU6qcEhJMQslkFN0bbLJ:Tz6SZslkFN0vLJ","tlshash":"6e3539a867b5a3fcf585b3f8892b2ab43e5638f5bb81d43dc3e55c14e0510ac89648d3","first_seen":"2026-06-06T20:21:01.806624Z","last_seen":"2026-06-06T20:21:01.806624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3980-010af18f0f321f6b.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3980-010af18f0f321f6b.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d32p%2B%2Fm96RxOx4Zm6GJrXg6yMFPu1jdBs%2BPBQ5azds6V9vy6PnAhKYgdKrrzlUhNX4TVvIur14%2FxBZu8cQpvjliny9BXTP029a8HzDl0hA%2BaoqIUSWyGndUY9RDT6T8B1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 102910\r\ncf-ray: a07a1da3c8e72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":514070,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65218), with no line terminators","md5":"8b37ad10ba3015b7d2e584214f3a354b","sha1":"9c8b593395d2867def9a1b9d3fcc1d63ef14a51d","sha256":"32806b333d93913e6f645808eeb76f3668cd161560ffe57b406e1b1c6bdf329e","sha512":"e04838c8ec0c57ab675242b8d939c526ce94a21181c8c374a2ec467ba2b8f5ff3efc1261ac92f9fdf220c80e88f797494cf2f9c489a5bb6f31b71ce28a5a701b","ssdeep":"12288:9Fw3/38CUqBZw5AcYk0G2KVLCfEQ4HAIrBMG18xyBByFt:uB7KFrvBBU","tlshash":"55c4d73bf3d06b6d27f17265ae5b23a9b20d1c79c394f94fa6b9f00413468a4a134bd4","first_seen":"2026-05-02T16:40:07.580887Z","last_seen":"2026-06-06T20:21:01.809267Z","times_seen":4,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3083-d0071871f85c1c39.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3083-d0071871f85c1c39.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ma78cTfYkzrnVn5v4Tr0lT42hLFvj7lm39o8EXdOc4mqjIxvePci3hPoF7yGLaEloVSJvkj2qaW7aqbLZJWbG2XLVVj82Kqlryfi%2B58dPJsm%2FdGtCFTnl1VpKJQq8MQksg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 37112\r\ncf-ray: a07a1da4390c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140858,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65178), with no line terminators","md5":"1e8736497d50701fd7e98b6af046968f","sha1":"dbfea11666fbb04bc71187a259b4318e935577c3","sha256":"f2bf0ce31e01e02feea9a6dba28d4318ce7e060806dc0c8e3a312b86a47bf163","sha512":"27ca329911a680c2a0654f53c3acb9846e41afbe86166bc73ee90c4f71aaea53c07bd3c3fe30a058e58154e9ab721f0238fcb7d087b6cae9a0313a6cabcd3aba","ssdeep":"1536:9wnbMGYAkPeRRJ0u4fU5g1+GoDJy+N0jPkV/KtXcUN3tadBZx4fH+dMxteMSVgvM:9wnbvvg1+lhN0wBDMxOig","tlshash":"84d3961600c827b52b677b25265acc0eb61bf23dc7429924b694c43b168edd461bffec","first_seen":"2026-04-13T13:34:34.639501Z","last_seen":"2026-08-05T14:34:14.257638Z","times_seen":5991,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/7185-18ae9a791372e1e6.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/7185-18ae9a791372e1e6.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uz%2FN6Mdm2LnPhSnGZ65EyZczbkAC%2BS8IXg4eTdsr7%2FGKR1BnYqHMJdyPiJRz5dC4ENIP5AvjFtffk5ZS69ndp7lAxVuoesX2qenihEsEhoyJyvVkdHb4Plxuae%2Bd5qKiEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 192295\r\ncf-ray: a07a1da4691b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714342,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65514), with no line terminators","md5":"7e544f7870f188bf46b3e80deae4b5c2","sha1":"c9b71ad31e7878e126f3d4085808204a956e45f0","sha256":"011cc7b4ec4c099c50467a4aa4107ab14154ae92da1e967d0315a860e7c5d43e","sha512":"67e931d851fcfd699adabe96babb9ead212cf7b85dc9cca036822a1661c99d16f144047ac8e0523f98abff6ef19fdaf599c52049f3afb3b3659a97447ecf8a2f","ssdeep":"6144:QM59C1szfrCWDw32B9SKUVG1DmeSafWTnp2iYEGeujxK8zDLUPmHUVYL83uS2a4W:mO7w3qEKUVG1DmtafWTp2iPtIIHtN","tlshash":"aae45d1d72c072ac17c363659a2b581ef36e596de121a804e3dac93c325ddccf13aba4","first_seen":"2026-06-06T20:21:01.810688Z","last_seen":"2026-06-06T20:21:01.810688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/api/mammoth/auth/check","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /api/mammoth/auth/check HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.yumwin.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brHQqdh3Iac2%2BnfGAmA1qHZXKmbWMqJW9A9aDbnf4fVs0mvlbzv9a21uITWILTxqu09zCl7wSu7U6SnfWtvfMKM9WKFAu%2FZfsNweS8O%2FpO1D8XMifHFmpdK7f8rWqQwqJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 38\r\ncf-ray: a07a1dae0b322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aced0d4c1bf7b416bd8757e86c69b12e","sha1":"242609e9dc75daa64e55af8d8254cdc02722ee92","sha256":"831690950d50aa783757553ff7dce0e549b2bf0c29fcc850ee8ef7a7f6bb54fa","sha512":"8c854561d71566fbd9d1e18c91f1bd391cbedf2b2e8b52d84205d4f773f36b14bfd5d3ca2cba9f5a300b8d96b025ab3eee5d5e3a19985e78386e04584e24d0b3","ssdeep":"","tlshash":"8d80040115000173f4001144113c1d115c54533745410014fc7cd0c4c7530d53043c17","first_seen":"2025-09-13T11:18:32.558363Z","last_seen":"2026-08-04T16:58:13.382395Z","times_seen":18824,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/stat1.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/stat1.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hu5qIs4SQkCYB1n0TTQ5Vy4hhZoBZ3pMgwaPlDrH6Kkisa7rL08iaw%2B4ta4lX8Vu3y1xYhYN90idQeCvfoUx5Vl0TQtidfON6iZu81241GaFFxpNWtz3J9rOMoJBUsbpFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1822\r\ncf-ray: a07a1db10c242efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3636,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62014bb87def86bc408bac073b0cece","sha1":"24ce6cf0ee0ebe7956bc76e9bd16151ec3da5244","sha256":"69a3b7fd361a9307dd99ab7a8c12c3178f4ee11e5573a2c0f78fd014e04f4b64","sha512":"ee7ff1a7a9cf304d61ac90e25998182241854e3de44df25fd9541b3caddb222d206a4d3fa250e4d4d64ab42d595f79a0e24fc21ec4fb753f0b7ca2d64eb73282","ssdeep":"","tlshash":"d771e6cd2be812f0ec85b7f6df06642cb80e14b2598848b8f21d1f557b04ce98a4ac92","first_seen":"2025-09-28T21:41:24.045294Z","last_seen":"2026-08-05T14:34:14.250078Z","times_seen":11669,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/twq.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/twq.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYyiJvfqurQ0j%2FMovQtiicuSS7nKI2Xefjh96A7aKVS9dZxaLghRziyDndo6cmOfl%2BTYzWVdSToahhoLykTEoKkCUtAOVHmTveUxryc9%2FUhc%2FzgzKEROeL6mer%2B69VPLoQ%3D%3D\"}]}\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1da118692efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-08-05T14:34:14.224288Z","times_seen":26986,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/249-0939437a59f2504a.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/249-0939437a59f2504a.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNTt07ljpdl7KLgvY94GgRRol6Kx9r00a2fXGKa4%2FEm%2BT5%2F%2BTOuFeD5IJxof0vGUHCEbY%2B%2BGegcfq0W7pQSZhR%2FI9ZTT6lid7VQTyD%2B4O%2FJPqznO%2F1KK2hZNJFZND9MJZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 61624\r\ncf-ray: a07a1da3e8f12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281586,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35745), with NEL line terminators","md5":"060875a09aa16091d9250f6caacea2ec","sha1":"12fa5ff29bd732eb02c461b6348aed9f51ff6eb4","sha256":"38a34decf45bd4a1b11829cc9dc3ec14cf3ece2915443bfb786f6bcc94f9caaf","sha512":"15e17e66df54736d7d4b2788433548aa5022c9c7e53bfe47f240f7f92cc8b10ba6bdce14001374500cfd2c7a2038349fa45593335258c8aaeb40b9a8fad40a80","ssdeep":"3072:BF4UMvqBX6EGIQN3VOopn7s5kcjAW8QPRuN:34UMCBX6Ml5ku8QPRuN","tlshash":"67948b31e666977f9bf230a459f537e4a4ca4a1ac3e8f7cfe1e0b01850479e6811c96c","first_seen":"2026-05-13T18:43:34.168951Z","last_seen":"2026-06-06T20:21:01.814611Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/es.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/es.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/pt.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/pt.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnHhfyLpzIFpztWyx275e3KAYaCLjj4Q%2Fzz63X5Pt6G2xccLQxVuEH92wy56O2eARqe80BEyW7luxzMwvoEWok78XL7UrOeC%2BFemGu6jr0TVtVpCFiFYJ2jmSUFXcHihGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 732\r\ncf-ray: a07a1db1cc4b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e9db125513715df3ec213f701b912d8","sha1":"f0fbb6a6e5b7a068d28792280f397a4b879deeff","sha256":"3054e3bbce0d049b0ab3d157a16b24f7a572a7a45e73d342e3b7b8d5f28f0a4b","sha512":"06c04e06e44b97fc2b4379173dcaa7003f3cc5ed58db1697e0934f96878fc16928e08eef9a0be085cafd61b545718da8e8a7d8b456b57b194a51c1e22128c775","ssdeep":"","tlshash":"4a3174c9a335b0c24a17cfa87f2ef3c2044a67f8291c9884708ba90c3955bcdbac4d00","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-08-05T14:34:14.227782Z","times_seen":12682,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/fbq.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/fbq.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYYAhce9Kkrqp37kVl3p4jgpG9HOBIrdjhER22vQT%2BcaN1dFlxsjStrsJa04CZ49iv1trn8D6QHE9nWOh0TXStcaYfba10tU22rgsyiwUMGpb0UMbYtdObm%2F1dSQxkcjSw%3D%3D\"}]}\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1da118682efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-08-05T14:34:14.239043Z","times_seen":26992,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/1617-516db04f21137a6a.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/1617-516db04f21137a6a.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR7ayKsbdx0mO3p%2BdBJny8SSlaUkIl81VqUWyEUYr1xxJY83T7lKzW7K5cBsHbuWZSaM0qPWhwX2vkstYwqEjwi3RTT3rhAV8P%2FQtcoYa6RlNjgk8iqz8bbo%2B5hSrW5Opg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 134434\r\ncf-ray: a07a1da459152efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310318,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96e12518bcc4bdbbe9000be499bd4164","sha1":"964881c32476cfe71ce4b7dda2df1fedb01927b4","sha256":"0d72038e505589c03cb66f853434a70524bfd107ba42445b5c4d48966311f63c","sha512":"ec4f41f65b4670eb2cb554fdaf6d5eadebdc5de167bd035cb16860e500477f99377171083aa1041d61fbd08f9a0ad13840391ff21f67a39cf0e1a3d552b5baab","ssdeep":"12288:yzq3gKoizq3gKo1mTkcAA92TkVAA12TkVAAD2TkVAAF2TkVAAM2TkVAAm2TkVAAK:J","tlshash":"6125aa4c8b6602fdab546cc0ca0770998fd186636fd789fccabaad145bb16cf0311e56","first_seen":"2026-04-13T13:34:34.656645Z","last_seen":"2026-08-05T14:34:14.258167Z","times_seen":5992,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/8648-b9a24ba9b5bc0c95.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/8648-b9a24ba9b5bc0c95.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMoX%2FyUNjDJ3BxhIjN5bFy5Z9wx2dqH6pUfpqNEhH00grQVnTL4S4DL5DNJTb6Eo%2FdLWSrhyJLcw3tqcLxOLGHlN2fvjjVw4MlERH4esC2QCMwSA2hdgVnj7N9%2B1abortw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 35166\r\ncf-ray: a07a1da459172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144939,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454), with no line terminators","md5":"e3f599cddc9a87120376d9aace5ab02f","sha1":"670c9b9a38b2d8867d420907c2eb55199d122826","sha256":"44383463479a0974fc0757d4e10097dd0d43519435364606906252bf0cef20d0","sha512":"5b5c786c66056e07adcb606c3819134d0fa2c1423c03024101bf6b49f00b17e976a40da05bb6bc026c72c7c891c6fd6a43900e77b55ffd7358a62de28652c727","ssdeep":"1536:Trle2nu/m82CFnMxwZCLVfvDzQjhY69xAq3CDQJUO9fEVJoZ1NbpGGVitgmdAYb6:TYUH821Ni95SQJxfwURk5bseKbsK","tlshash":"19e3e889f191f2fca6a224a9412f444ef22e3f4ce5255410e6f8dc083a586d9bb37fd5","first_seen":"2026-05-24T03:30:07.371871Z","last_seen":"2026-06-06T20:21:01.817974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/holiday/hat.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/holiday/hat.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrvXQgIxdbX6srkrpa3TEyVJaCXQN79APUAsunyuMt%2BuFdJtJYlnO52JmmruWR%2FdqSyR55IT9o1MMWc9uYiLvJhXKEo7UHklUsFeAfEdbSzRPt1G%2FoTGoPg3Wqnzu6w%2B7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 897\r\ncf-ray: a07a1dafdbb62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2987,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebf4ae376fe7b0c4da02abc9a0e648cf","sha1":"74f107d8c9add6f03d767e3c60b4b10d90f9b2aa","sha256":"67cdad7bd65668f2f0f392efb2933b7ee75902995fdefba25792859e4384b566","sha512":"b3fd5d449af21db89d091f46d6399f4e446889580de88f08413222d8f2b4a66c10eb09c0c3277126884f8c86fa0ba8310edb3269b400c85ef7afeb4c22a6278e","ssdeep":"","tlshash":"4c51f0f069fc608c65460738e6be88922f2d99fbb20445497d5d2ab0d717883f98fb94","first_seen":"2025-12-07T15:18:05.826288Z","last_seen":"2026-08-05T14:34:14.227007Z","times_seen":11994,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5669-ed334c2dbb466446.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/5669-ed334c2dbb466446.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEZzYl2y9e4EmxVV%2FWtHmbudYs9saS30qwzq%2FomytAlKruNr%2FKPAoSUsxQ3gi2vy99wPOYPwmfBbmOLtfYwz8c8noYP57bEbnbQ3rk7nt7a3hXi0jnnGOHngwS%2BsHJl6Lg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 350609\r\ncf-ray: a07a1da418ff2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370944,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"edcd02e15f2012ec6437683a44554a41","sha1":"63a9be64badec0c0801046fef99feecbfd488cff","sha256":"e3595fda91d9d620bc150465632369c1124b0b7a387474cf81f04df6d534d3ab","sha512":"5869e9f6e59467227869d6b868b638882e2035c928efc7d4f21d43627243df6ce35e0bbb0a8f8eba23e8d5f39a3ba5b279656aab8fb3cf12652e5ccd1dd325bc","ssdeep":"12288:+3PyxSJSN87vIomx0wgH+vVUqmAStvp1H/llr9dhLR5EdNbE3aYAiLQDEmAx//pU:jNgvIh/VKa","tlshash":"c9250f5ccb9201bdae58adc1ca4770254fe282531fd789ed96bb7e214bb0adf4301e61","first_seen":"2026-04-13T13:34:34.672452Z","last_seen":"2026-08-05T14:34:14.256648Z","times_seen":5991,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/6544-b0711005848a5ae1.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/6544-b0711005848a5ae1.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgB%2F8xYXr06lGSzVMbJtmHITQqZ%2FUGPpLJDpSEtZz8JurAKta228unJ%2BFDfvJKi4U15667PPIXvgZn7G36ZzfzlXTMEXZ78Q24YtRztu%2FRE5BexZ44WhtiKi12aVzQj6eQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 192136\r\ncf-ray: a07a1da4390f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932011,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35586), with no line terminators","md5":"d2e283a727722981973d2aea90c8c7f3","sha1":"8359aa7746730519a0cab7e753cc698cdb2567fc","sha256":"aa06baafbdf28f5128f2416ebcbb0c0054771e925c892a299acf35eff1a765ac","sha512":"1125fef308ada6b53d46bfadf8e45ed7f1499cbe3c4e2f62ecd5168a7fcecf75abf7a5374c04dbb9343a6d858142fb1f53381cbe88a0dfce14ef75904052ba32","ssdeep":"3072:LxF1G4zn2Qbx7Lg5H+vCWpduOhWr8BqUH9d8YFdNW/iAezha1h5L2iQfCJk4IWsM:hOZO8/qGwUM3qMz74SIxTrt","tlshash":"7535423c836577ba2bfa34883ae52f79954aa534c3d5e3dfa59072a9108bcd0401dbdc","first_seen":"2026-06-06T20:21:01.820316Z","last_seen":"2026-06-06T20:21:01.820316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3275-bbdcc2e176783c7f.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3275-bbdcc2e176783c7f.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5W6BevbE%2FthkAxC73%2BCqULNmGRvK9rNAX0NMXwiSd5xt%2FA4vcmbZLT%2FDrVtVX0G%2BW4sVFBPFrn3xPHUQY6u6MmHZ2Iem1JFDt9sPSWNlv%2B7IGgJ%2B6aGe4Lwj%2Fta8QcRxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2070\r\ncf-ray: a07a1da4791d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6161,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6161), with no line terminators","md5":"29fc6e35b3ecf993dba69228545f4d1e","sha1":"6d3d45d5d6e89c4c0c4be382359946c7f0c64529","sha256":"23fb767865b4ce96a897782c29d5a975a49d03eaf182146c61cf437eb690eb62","sha512":"17baad66b6b4cb23da59cdd3a0d01eccca6dcc23a46c7dfd990ebe03b91eda2b8749261247e731ec40440fe1380174321def6faff0fd888fa18663fff48e7a1d","ssdeep":"96:B6MlXsyMUxCCPs1VAbAvHbhPfjBItMbk6wd3E6l7b+5UYwhP7gb:/XDZ8CPuCsH9PFItQAU07wU7P7gb","tlshash":"ffd19961f091ebe4f8b708e8952fc40e726b2644d61948e1f5bbb8701b101f87b27f89","first_seen":"2026-04-13T13:34:34.666569Z","last_seen":"2026-08-05T14:34:14.251614Z","times_seen":5989,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/index.html","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.yumwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6je%2FXCeubDoD4S6JxK7r7WyJULmj%2B9Q4TC7kqiGY8LP5w7zAlblRO4%2BT9vQDoTkKOp835n7z0UUrHior9B4pSC0J4v02fwM4U2v79GSTkWBSe%2BFUxcTBB1t5RQmm9b8%2Bvw%3D%3D\"}]}\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1da4791f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7151,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2283)","md5":"cef4867f46d657dd497e95d45f30a5be","sha1":"4f2a5086d64aabef031575c84214750aaeddc51d","sha256":"180c4db46d99bac8fdb9aba008793ef3e601438a09f5c8cb3dcb931e3e69031d","sha512":"98fe114250324e2b9a81c86fbcc8aba368b84af9bc2af4b5ffaefb45d8d4d0a5aa5f9845246788aea1e8d890380152ef31d903af025780d97114e88034fd1b7e","ssdeep":"192:EUB4BfBcTfnx1peUbTu5PJR2ebSwdg7FefSpGB913MCqO:EsgZjkq5PJRaDFU","tlshash":"80e194b36d04993a07e78fa838e7224c9237e1468878ed95ba444c6f01c57f9c477f8a","first_seen":"2026-05-24T03:30:07.288602Z","last_seen":"2026-06-06T20:21:01.785326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/stat2.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/stat2.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvO0LHqykJMa7SCG4LpcNzCdGPKK09hh3BJg89giSkQh4ZhKHcANGHQ7VKERNoELcThAjzoucTwrEFH7u7XxQQmWGoEHZS2pl6tQpvRjOIfKFM8GiIJSh4qU31hYYBiT9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2008\r\ncf-ray: a07a1db10c252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cbab71b6d96ad7f65cb930bb401ba68","sha1":"48996ecb2d0d7d9c1ecd4ccf994b9a24dd52ec6f","sha256":"a1c783e7030d327da610a9c36e0359b2e07573771468225ac6a6cd3c2d7bf12e","sha512":"5e70c60a35359b551d6009e1f63ebef5911c29a63d89ec24225f48c7f20d33982b1f0353cade31e7f541d3df5d534984b6c69379373d086a7e1c5adf536eb780","ssdeep":"","tlshash":"3881d5d82bf585e4a2869be3df01582c3d0790fa2ec54840f39c6e682f55c7dcd128ca","first_seen":"2025-09-28T21:41:24.398473Z","last_seen":"2026-08-05T14:34:14.26124Z","times_seen":11670,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/es.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/es.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzDwdMENNQVQwhzAZ%2F5Ls4uj0pG8sx1iaGfWIU3vUrzlEYEthDHqQb9EOEO1qMLY0nh94ZT%2FlANHypzipYRQ1D6LwfYboerR0Cqx0KU3XC5XuBe%2BTThog1UKq51cweBJcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 333\r\ncf-ray: a07a1db1cc462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8224968196d0dd6d84e44c98093c280","sha1":"882b8a579de32e24e13e999b411abd814071cc2a","sha256":"f8cf69e4d0d285ff8e9be18f239b65e38fe1a235086a8daae53b1baa1e7a3557","sha512":"096da45f1e9c9fd020364a51f387110fe6b08969d607a52acd6acf7f01215e15ebb88c93484b7aef1392143f744ca491f8862151d5c4850ec8f7b9d4d419e870","ssdeep":"","tlshash":"bcf049c5743db18388098b742d6e70e6408e721b554814dd70079b28a3aa3df7ac2f6c","first_seen":"2023-04-17T16:03:39Z","last_seen":"2026-08-05T14:34:14.229465Z","times_seen":13184,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/mix/landing_zeus.jpg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing_zeus.jpg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9zWx8ClTzoBvkL1brwA2UuVVuMOaKKaiSb8i%2F%2FE9JfuZ0C7Nv0iKijvBAZVWxclnXYxwvAstK4LcAV2MZsrYVLx1Vx9Q2zo2V28HHMik1R0z6Qe8gKX5eVASt3qs53X8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 179638\r\ncf-ray: a07a1daf7ba42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2368x1028, components 3","md5":"28ddcc23e4d8be01380e65e823904d84","sha1":"fe6cf680ed934ce00bbff66393dd076b15184486","sha256":"ce31ce6181ee64d6d05347285c6b04765859159285cfd706b617e02ab2851839","sha512":"375fd38d2afd987610235da2f48799220b401b999f012bef5d83e079e3f6142bc425d5d78991f35c8df66c88999adbb165399bd5887da34d9e2c9c495d7d327d","ssdeep":"3072:PpZCDctONi+s/9M9EpUdbnP7uAj0Mc85RjRdr/qHrDIDzyiN:L64I99P5InGjRdr/qHrMDWq","tlshash":"001490038c1c8b97e52993e4bd530dac2f592b5ce9813aff05231ecb7e645265dae01e","first_seen":"2026-02-06T07:23:23.986859Z","last_seen":"2026-08-05T14:34:14.260721Z","times_seen":9285,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/muskColorDSGN/mix/preloader.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /muskColorDSGN/mix/preloader.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUKADD31Pu7oofy%2FGEnbaD7xFYM5E0IewWUFDO3rky6pGwT8Tnsby%2FDDo1EtK3criLgQTtRUArufLIrwgjZsOYA%2FyYi5%2BN%2Fnc0WYD3bCZwTDMqYNW79A9f7GGBtIC554Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 19879\r\ncf-ray: a07a1da108632efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72100,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"850e1745f4385099a3518d32d9145e74","sha1":"69969125e203608b7462ed6f8eaaa2917d48ab0f","sha256":"31ccdbf4baef0e8d2e5ef2d71b200f1b8288afa891e6ea50729feecd86dcb895","sha512":"617fd124ef9ca7077d4215668197b1bd456b3f6dd2063130545d4040c4ae11c1d37a569ad757ff74ee26ccedb5db2f150439c8c515bceef6c0434c81ae46edee","ssdeep":"768:YDpuRdZRXU55SUH2v9rirdHR96Hi3WdoanhrqCLUEBHp5ZuQ+Ip1xLtaD3LxUynT:Qk9eui+hrhUEBn8WXED3Lx/T8QdxGwlH","tlshash":"a06395ed2bf018c949c8c3d7ff5944a92d2a91fba5484908f65c4fac1b85c5eec47ac2","first_seen":"2025-11-16T06:53:31.140817Z","last_seen":"2026-08-05T14:34:14.247402Z","times_seen":23801,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/css/10dffa892f034c33.css","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/css/10dffa892f034c33.css HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxMHU8LBdeOJqFlomv58vxMvK%2BvTARTyD38P4cDBPY6vevEvVP5%2BqHiQsAM8R68sYVaaYvGEv6ka2D1Gd0wiq34DGd%2BQOfDAzRMuRTd0DFvngPBBZlm4gGrqfsjN4V%2Fatw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 14043\r\ncf-ray: a07a1da118652efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76394,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"903280523a763cf14a01eda1a188c571","sha1":"cb8e1fd73250fdd6509ce200f5215a75c6430be9","sha256":"91441a25f42db624a6ab86a8831b21a2a1f2466c4dff5f9d60596bf5c5bc2f47","sha512":"c8350ff391c334c4f5990ee6dee8b883d6158ff6fa8fd0bb5c8d3a1673b76ef3d2af75afccc76b5ba33fcbe554bb9db09202284026401b21af40704edd70497d","ssdeep":"768:91aLpv9OTdbkomfYKekdx/+dYCzEvBvwbniRXpnBv1L:91adv9qd4omfYKxb/+dYxvZwG","tlshash":"4073a6365130a13c7ae76934be98a5cc3136c592ab335bdef05abd25c1c71a73a53388","first_seen":"2026-04-13T13:34:34.68351Z","last_seen":"2026-08-05T14:34:14.255573Z","times_seen":5995,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/5358-09e95dc15b38e315.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/5358-09e95dc15b38e315.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4H6KOfNLe6Ku2Fs1xcusgqE6Add9TJ7quEq1qty8xan0ydsFYzm07y6tX11DJvIdCYGpvqo53eKwbdzzv54BZtZvxGz02T%2BsTwSR9Nh%2Fh1bBgq5HRzhDmun6juqKBNjE2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 229847\r\ncf-ray: a07a1da3f8f52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65416), with no line terminators","md5":"5f3c11832d5f60a6e7792397709c4e8f","sha1":"a5528c6e0ed03175863e2f80f7452ccb733aeda8","sha256":"54fe7bcda90697fdb4e5efb0b6613b923259c53ebade71c4ceb0d377702d25c0","sha512":"b3f7485e786dd46c15ab155e5a3ab52ca8b917f8505ad84cb3f572be824eee82cc10227e2943c8b1b35fe6b32bc5ba52fbdaf961a241579b227fc49a9929b7c9","ssdeep":"12288:RHJJmOl48wdPyBOpCwGQWA7k3gbrXavjqi:dmOl48wyBOpTXbrXav2i","tlshash":"bf25072da7d433a41bda3149354a5f7fe25c7638c351e00fa5e2ea7d224cce4613ab98","first_seen":"2026-06-06T20:21:01.823774Z","last_seen":"2026-06-06T20:21:01.823774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/7262-260eb856ec86ab3e.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/7262-260eb856ec86ab3e.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giGtz4HWOBn8NVYv%2FsY6JgX0kLlY9mhSCtmJ%2Fp4dDAqATyklo97f7n%2Bs%2FPLB3wk7mXJ65Ov0W2M%2Btnp2TdDPfOgfxKv9i6MPNwDmdrmc%2FvDYWL%2Bt%2Bcuxzf1MMlrAYTVAHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 21758\r\ncf-ray: a07a1da449112efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77603,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65502), with no line terminators","md5":"fc5c946ea01e852079c01158915eb9ea","sha1":"5133bd0de532b10449bb08521a92ca6a1887b7eb","sha256":"4a07fe3714db1466ba3968c1de34671f62ca3d5a3e9a01c12fecbdf73f2361d7","sha512":"18a65b639abe772a19c8332cf3709c4e0213353430e032b2cd550e739db2467dfd24ad1fcb4a4ea3675c81f34215a5ffc0ffb658dbf80ff70c2382171199b96a","ssdeep":"1536:nopcljgCIsBEzrJ8i7e85k7yRck5L8Nwxg98:nWuUCIsizui7e5mckJuwxu8","tlshash":"d3730a953180f5ed17e381aac42f644ee32f5c2ce51a766463e4c9ac725d8c8e137bac","first_seen":"2026-04-13T13:34:34.62862Z","last_seen":"2026-08-05T14:34:14.238467Z","times_seen":5992,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/fonts/proxima_nova/ProximaNova-Bold.woff","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/fonts/proxima_nova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/global/fonts/proxima_nova/stylesheet.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sAXH16Caz4WuBWeSNfXWQwr%2F638d6LHIR4crgA0lboZreVoTT9Pc3Yt12N9YQt8RtJqNo4B6RhwaCTrxn1BaNZidJZsR2NtrIuwz%2FxYwALOtFbleQB%2BznntHl9F6uNCWw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-type: font/woff\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a07a1da479222efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52068,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-08-05T14:34:14.25462Z","times_seen":25350,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/mix/landing_girl.jpg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing_girl.jpg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9wNKaqHSsOTJ%2FrmO49Zyky7aaBCLt9DvjYCZRZsG%2BlQJuZ1X9c8eLOv6%2BU3DilKTseJxOle3O%2FbhQfLh9aefMtYy53M0dfGa3yGyO%2FfQ63kJ2vzFlEJvBFzNLt61roXuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 75067\r\ncf-ray: a07a1dafdbb92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78517,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1184x514, components 3","md5":"8d25c1c54ad4e4fda7a046718150d345","sha1":"040d0a141110b4931b44882a4a7f684c1d88ccc8","sha256":"396fd7d00555a14daf95d589cb71ca04832cb73a1f4d7526dfe1230cf289d24a","sha512":"55594743a12b9482a937157f0e70d6b72938d8ef197ba4592fb0be93af2aeb2c637a17bbf74a269a3074cf9dc5a95ffb86ba0b5580b0a7fbd353eb863369e0d8","ssdeep":"1536:5UoMN6p0PBEXSUrkj4srs72ZEsEsKuU/jfT7OxIlp:TMNw05cSUrUrAjvu2jQSp","tlshash":"2c730247ee4840f69c1d4cb47c961c6e7f602aad2d725a0d3b124ec52bc3b8aec7e456","first_seen":"2026-02-06T07:23:23.951452Z","last_seen":"2026-08-05T14:34:14.23614Z","times_seen":9282,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/3047-780ecd63e8341fd0.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/3047-780ecd63e8341fd0.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ak%2FVrLb%2BOOon8VG9FaA8S3YhuJldwFOjrCORCWBhW9y9wEhK6nGnXCQWIxOqK6t6688WVLoe5AAxblXqfebLXG7rAiBnxDLS2hZ%2BjKFYR6cm8LJzMWKqTJfXfoopfCIBOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86480\r\ncf-ray: a07a1da3e8f22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1a45ff6317fa4327137123bb7bfa8d4b","sha1":"bc1ead1c1e57bc9d70d9ce61b6580fcff62dde6b","sha256":"52347ddc20c0cf9d1a0b8d9b4f7324defd9706465148f58c081f4c07848b1d65","sha512":"714d24afd1fc0a2eda39f7f9793701b61d9b29be01f251c4cbac43a76732bd29c0352d99eb68cb43e69e5670f847ea3e8b4ee9593188b64937437621993ec32b","ssdeep":"6144:fT+0+Qhv42Fh0idHSlq9p0jy79DMHyPCij6MIVs/e5rKYfxGAaXaifqUMjuTH8NT:rrfOR1","tlshash":"d3644ac871c1f4a8929361a6803f050bf23d2e2de45d9454e2a9c8d87979dcde237fb9","first_seen":"2026-05-13T18:10:45.788088Z","last_seen":"2026-06-29T09:43:46.565764Z","times_seen":4314,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/greenColorDSGN/bg/preloader.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /greenColorDSGN/bg/preloader.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/_next/static/css/d4dbba7cd4889f6e.css\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jU5hhmOXp8pRFf8vOyRY%2BGLXeQblwuWsgMAHGyhbO8EbjFvheswEpep5J8GiuNrk9s0hjYl%2F16R%2BfnSPzyZE0wUwHzUzuVD5teapLB0qe1eMTRXcT%2Ft15B9YoHaf2BPyLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 883\r\ncf-ray: a07a1da479202efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4cf0d8e07d5ff0a22dde176b5e6926c","sha1":"bb3f41bbc80202459f3bd9a27054f855523f8ea7","sha256":"caa934ceb360955e8ef4eae0984d9ee475137fa2eee2b013586e25461bc1703d","sha512":"03fa93b18e1610abefaaeee02782234d164bd6de0d27aff61c5aa02e260d50e0b69233306e46bcabac18c6de2ce085a5859bd4ee71c2480acb0e4a719a3c5123","ssdeep":"","tlshash":"703122c04abc425cf604a6a9cf122875be1a64ce578564baf3ce9d06935805b8e0299b","first_seen":"2025-09-13T11:18:32.012309Z","last_seen":"2026-08-05T14:34:14.228918Z","times_seen":22008,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/favicons/greenColorDSGN.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:07.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/favicons/greenColorDSGN.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:07 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTvzLwsq%2FU0fbepTPnhoTOQ08TAdChQYo5NLoMT7VrhcmRlpjh%2FyIH%2FFBN2ZyxBl6S3hFih6MaxfPWZhqrHW4dK4tE%2FxJkjoqX8c7Bj6BszdzoGoMh54fyMZSHw15jts5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 750\r\ncf-ray: a07a1da91a142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-08-05T14:34:14.234534Z","times_seen":21998,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/2366-925fc85d237b17af.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/2366-925fc85d237b17af.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Kz%2BiEAAO8Stont04qtrxgAlB8v665vxxDaj6nBVXzaxhGmprir7aw4EldLHj34TbQXifuReHSqKWKnkTkXRsTd2tyHbd2a%2Fb5gflSJHtvhBbyUJHHNDFPNWYmm4NlL18g%3D%3D\"}]}\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a07a1da398d52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (467), with no line terminators","md5":"f7911660cff2a47fdbc9415ace2e3188","sha1":"3ab908a0337f5ba043a079b563d3c584521ece41","sha256":"4a2741bde36436647e2ae672eb2ef1262c83541e3d13784b48cb37b165bddd8d","sha512":"e21a40e23085dd405ca6c8473453fabc4c7df8999a472fad7a94a4f26856b2d5ebbfcae375412db956a96f92cf7f630b5804e5090ac19f22eb4b7a1022c96b3b","ssdeep":"","tlshash":"54f09e9920057c387abb4c02096e8c2a287c3572be091581e707c5a0009faf85170e9a","first_seen":"2026-04-13T13:34:34.684954Z","last_seen":"2026-08-05T14:34:14.258688Z","times_seen":5994,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/css/d4dbba7cd4889f6e.css","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:05.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/css/d4dbba7cd4889f6e.css HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJy1jcOA%2BhHUo3qo9qx56RZv86jJ%2B8kWPFDFDMIfbuFNX6hOYfG9hAwbQ9zUNrr5TDgSiECcj%2Fn4Q2D8u1BCqYh%2FhQp%2F5sro3QNVMj8jbLXlDSrq%2FHiZxzb8669qGkwb5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2409\r\ncf-ray: a07a1da108642efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8868,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8868), with no line terminators","md5":"68eb5f61ed957f0983f60b442f427751","sha1":"16106de8065b5f5de07d98588cbced8e42490d2f","sha256":"87285d37d87af815bcc3e3f7ef033d46840703246cd461fb2f47728d73e05f02","sha512":"bf29e12876a49faaaaa3a4c479c3e92ad15d6c9744bc2597d9fc4ccab6e139c99caf7c0ac53ed1fa758d97d4f4f4544609c92091fabcb7bc54f242cedc59e73e","ssdeep":"192:4SJhREZKVQrejs42r9X/Xqgv6UA7HHvhvlM:4fKV44hlm","tlshash":"d702f73cb311a0b242474f0f94a3ef6b8d6fb05acf674a6691a4058cb7cd9d015e1dab","first_seen":"2026-04-13T13:34:34.649281Z","last_seen":"2026-08-05T14:34:14.231704Z","times_seen":5992,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/7580-1e05813e2213c2fa.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/7580-1e05813e2213c2fa.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gP3VfBo6efD0x6U%2BDqXVjcMmLqi88%2BtTiu8eVBG6ai2qssAMUYAJDaOuMFM1q8FrkagaLUKPd1XGPhVLjciMeoYEQjp2n%2FSeILMvG9ASFJZTYi6wCotKNOzvlOnbzAuivw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 714375\r\ncf-ray: a07a1da3f8f72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1451511,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65485), with no line terminators","md5":"98c08cdf440cab4defd3a6756db58173","sha1":"cb0468f2d2d3816651663fa0bc74664e8f52d407","sha256":"717efa16b30d921eb2daba2cc677ba5fbb7fae501448c81e214bac6760160ef4","sha512":"a124530866a44814fac196a6b626cacb017d2bc4dd8615f0aaf634db229322b4e40d9e6a8b360b6632e76f7679435ec94dfc5feadacfcf0c5e3a65fb89ef1eaf","ssdeep":"12288:EJe2e02xEzaIGTBrfzLd91WJ24cvYkjZli4CnLPwGDkiqCCE+WTjjXHPxy0D8eUX:K/cpQlKxQvBIVV/7x6XomFnoF","tlshash":"e925f7198a6502fdbf596c80ca43345a8fe295137fdb89fccaba6e1447b4adf0301e51","first_seen":"2026-04-13T13:34:34.686233Z","last_seen":"2026-08-05T14:34:14.256144Z","times_seen":5972,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/2643-f0046750557ecfce.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/2643-f0046750557ecfce.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbAQbHvaq784eq9thI9uJ4Tw75CguuKlGBhuZdt0mjD5SGKWORpfLOjHFHK4dMy7yk0fkEt602WjRCwWbopC%2BCS6izy5zGLuiEGBhreTmzZzAiBScISJ3SQVqU5OO9gkLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 71174\r\ncf-ray: a07a1da4390b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276387,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65438), with no line terminators","md5":"22e80ddc9f6a618a74ae2024b1368d41","sha1":"92a5cb5a65b6db5e9fe377f30c867d91395fe65f","sha256":"cebfb1f5431b46b051bea9d7bb688099a15ae2d0bc9d906fad0678294dce11eb","sha512":"96d815f6d514ef47fafeed39af74b87f862781c464d29d2983b0b580da47867a08fe38b8f4cec9a32f181dc4174b981ade00e3b797cc8cdbcb48a0e7446a071f","ssdeep":"3072:lhsm2vphspSZ5qYHGKTG2Ucav/sLJ7T8Z2KxTofh5p0yEdQ8IeCp5+V0z0DLdD3K:Q3koZ5XG5sdSqfhwyEGASNBpH/","tlshash":"83440c2769c4127c2bc362569d675e4ef35ca918e215b419f3d7ca3d338c8c4b13aba8","first_seen":"2026-04-13T13:34:34.673947Z","last_seen":"2026-08-05T14:34:14.233399Z","times_seen":5993,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/9883-c825881b2c3b0fc9.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/9883-c825881b2c3b0fc9.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejizki2OK6sYA9IOPk0zIabowTOEJlhdwMv89i8QUHwUEogTne8nj8VZ083rNBzX4ck4miv8IZ1gHCWOraa1vrtbsSya%2FTkEbk247ZO1%2FNwEc9BeFHcHEOyZyC4o%2F0BbRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 102581\r\ncf-ray: a07a1da449102efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437773,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65172), with no line terminators","md5":"76f25e86f3913d300a34589af2c77bd0","sha1":"8e438974d5a0a845334a251313d2c0a94f09a29b","sha256":"d04bf1df68401843f2cb65fc41813f7d78d9dad8271c0bb39bb66155e076e054","sha512":"4ad7bdd43601f6b378d84e604403175539aed05cf88fbf1444f543595a187debff82c4f70fc925c93d485247e41a1c9ccdff23747230badaf8e586e58bae22ad","ssdeep":"6144:TDWV4xt0RTTpMohNVG/ypCXJ/ABCf5iwEVQt3byQvUfV:TM","tlshash":"2794a829494416622b6323cd268bd80fd08af2658246c9b9f7964e7d21cfdc4e13bfdd","first_seen":"2026-06-06T20:21:01.829942Z","last_seen":"2026-06-06T20:21:01.829942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/holiday/bottom.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/holiday/bottom.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rsNtNU7W9D2kv77YDN8sQmiWtSNnDAg8c%2FWXB7m2OHJnVAoLYa2YXAgAvD9BcFQT6mKa6nqH%2B6X9hIhGmxohhGbRt5yDXRTzEo4NdJlPkfVSwTGkxSMu9OaJAhRr9U4CeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 520\r\ncf-ray: a07a1daf9bad2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"165634688949125db4ac194fe8681813","sha1":"c8d8f84854dc11683adff1b17974b18a3077173a","sha256":"865ac8ef0db76c4a0224fc4a29905e93b9e1cf278b42f7c95c8e1d82312d5e42","sha512":"9a4001c1e30d41bda349a631e7e00d8cf2528532717f23c5f19db0ac56dbd771e779ba07390b0c8fbe0beb77b3996e45b9bbef7b770850f8db207beff1888a7c","ssdeep":"","tlshash":"f2316f5c60b6ed389984c14c8d1fe0f5361f2fea07d6975620844dadfb094ff29626d1","first_seen":"2025-12-07T15:18:05.832815Z","last_seen":"2026-08-05T14:34:14.230589Z","times_seen":11987,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/holiday/bottom.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/holiday/bottom.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqQSKqBALonHCZgMyTS4hYouK%2BMn2MGn%2BOPZWQ2ujk2rhVLchBARU7XV6toEuPboEoTTLdWPnmM5AEB1Kvtbfe2l91IaP4fprpIXiyvBX3px5HnXItmcysGnlGb8Kmd%2B1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 520\r\ncf-ray: a07a1db0ec1d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"165634688949125db4ac194fe8681813","sha1":"c8d8f84854dc11683adff1b17974b18a3077173a","sha256":"865ac8ef0db76c4a0224fc4a29905e93b9e1cf278b42f7c95c8e1d82312d5e42","sha512":"9a4001c1e30d41bda349a631e7e00d8cf2528532717f23c5f19db0ac56dbd771e779ba07390b0c8fbe0beb77b3996e45b9bbef7b770850f8db207beff1888a7c","ssdeep":"","tlshash":"f2316f5c60b6ed389984c14c8d1fe0f5361f2fea07d6975620844dadfb094ff29626d1","first_seen":"2025-12-07T15:18:05.832815Z","last_seen":"2026-08-05T14:34:14.230589Z","times_seen":11987,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/countries/in.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/countries/in.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ndate: Sat, 06 Jun 2026 20:20:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MV8Rcp1tMKj8CEa2QFbIsUms%2FRLnvWuQqVdymttyf%2BKMl2mHUAvF9HDVdTr9vcj9a%2Fspu4fD8pATi4SauBzcrz4jZuTEvTt36w7l8YHC1Q7k4OB%2BxvYLTHDGO38Pay09EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 780\r\ncf-ray: a07a1db1cc4c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2301,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0c892dde95804d59b20416b8db9fcbe","sha1":"41f09b07a8c26144aff93575ba4a07a0122bdae6","sha256":"aa82222076d0dd86dc6f37947faf10333212886549a33c4fcf6b44141b702018","sha512":"8eadf55e31f49edebffdb864eeec76900caf6f5163d2e3cf1988757271bb7c5e2c26c3986b4fe5b2f8953e733ea0c4bf4fb3cce0ec4d1010e20f5125abde3ac7","ssdeep":"","tlshash":"2e4165a9717df8cd9b01c6fda63bb9f1b00f50496b12d3a9b55b0f0a481a4fbb0056e0","first_seen":"2023-06-13T16:46:48Z","last_seen":"2026-08-05T14:34:14.223733Z","times_seen":12736,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/_next/static/chunks/1342-e39ae382517d6e27.js","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"172.67.192.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:06.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /_next/static/chunks/1342-e39ae382517d6e27.js HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 06 Jun 2026 20:20:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\naccept-ranges: bytes\r\nlast-modified: Sat, 06 Jun 2026 20:20:06 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=869N%2Bt2ik%2Bm0VM%2BuluYGaNnnrWNJxxY2LBvuI1teWYl8G%2FbAYlwHmN049qkhVjLiXX8JRIJ6ffhp47Fyp8SYnBKs8Ipc6OYw3XQnsmOGEfN5n3SnpgJXI%2FxOGvKrsxDG6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 544934\r\ncf-ray: a07a1da3d8ec2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1449011,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6fc40cd79ee8752ee16a42d8de3a9836","sha1":"899243cd2ffe7a5b0aade6310d845f5f47289847","sha256":"0a935b2d469e703bd6e72a9f682823d483fc28d56f3a663787b9c21498d9db30","sha512":"13d3b80b739af5022c6c89df890e60ee7ea4607afb89204aa6fb7d43e6350cdac310e4a6d25be33703fea38f4cdb0ee7f1197766b97df7d197a6db1dff6459b3","ssdeep":"3072:2XikgRVZiU7NiK6xkdF3GK0/NtT8aH7fwTqdypuWw+1sGKIzXBX+:2XNUpieiztQI","tlshash":"5c25bde8678526e5bd4cddca5940b4ac007980370dfbd1cceb2af4e740b87b746a9d26","first_seen":"2026-04-13T13:34:34.611278Z","last_seen":"2026-08-05T14:34:14.243609Z","times_seen":5990,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yumwin.com/global/holiday/top.svg","fqdn":"www.yumwin.com","domain":"yumwin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yumwin.com/","date":"2026-06-06T20:20:08.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yumwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 18:40:16 GMT","end":"Fri, 07 Aug 2026 18:40:15 GMT"},"fingerprint":{"sha1":"7C:55:AC:F3:95:51:5D:AA:19:05:CA:F6:E0:80:94:23:13:F8:94:88","sha256":"3C:B3:DA:83:E2:8F:F2:78:77:BA:08:71:6F:5A:98:41:8F:27:07:25:2C:55:46:D8:A4:34:44:00:C0:07:50:95"}}},"request":{"raw":"GET /global/holiday/top.svg HTTP/1.1\r\nHost: www.yumwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yumwin.com/\r\nCookie: landing_attr=ATgC2EdKaxQNaDNHaU1cQCqXrIRhhjDj_F9Rtf8Dq1tSURDN5owkJWqx86yOVNNRBKN_WnF1xuetTfV6wdFrFl_RQ-vO_kk3v9IA-Kr_MgsrjcHNzzQ6yhZVWAnLP22kQ2YCd8Wus-UmMmDp1uO735kxjOzmCPdUKnU0KQnAij7CmY2lsWzqXsfYUnAPQarLMtv9HxT-c9r7Hjsgdr0Uxcdg8oNZ3Uv8JWYgg96bbsdx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T15:03:21.171926Z","times_seen":17726475,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"www.yumwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}