{"report_id":"e816d25f-8e42-4671-8be3-f2793e1c6290","version":6,"status":"done","tags":[],"date":"2026-05-14T12:53:39Z","url":{"schema":"http","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"title":"Winpoly | Automated +EV Sports Trading on Polymarket","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T12:53:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"winpoly.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-22","domain_rank":0,"first_seen":"2026-05-14T12:53:40.510039Z","last_seen":"2026-05-14T12:53:40.510039Z","alert_count":13,"request_count":13,"received_data":2570277,"sent_data":5989,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-10T01:39:04.295052Z","times_seen":100860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b02765e427cbd3fb88adcbf0d610d8a9","sha1":"d75e5d568f1ebf77a885c8994845f83555d24b36","sha256":"2b0e0b7d33313263bdcbc8904a2fa35ffd5fe1302283b9f4e062544b9b899c8b","sha512":"f0c1d9bda7be265c3315e9d8aba2bcb8c3f6cdea9269a0536104dd54c96a69e80881010b701df82589c813208fd2bbf5f4f22924592af16388caee16df0e5e55","ssdeep":"","tlshash":"dbd02309f147dcf68c31540a10341d354088dd7c4190d8c4639dc78540609b41745d4f","size":200,"data":"","first_seen":"2026-05-14T12:53:43.772389Z","last_seen":"2026-05-14T12:53:43.772389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/fd9d1056-23bdddb1df3a91c8.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172831,"data":"","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-08-09T01:59:57.341842Z","times_seen":3430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/23-a3a1b6f47a77ad02.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a2d7c3d59d9298d8e3dfdd6134a4eca","sha1":"e77d21b82dd7f24fe0e7bcfef2e0b9818b2fed65","sha256":"839d821426383cc0f978a6a20074e6f5524d23ad66f19bdb883f6874bca1cfce","sha512":"dd050b2fd17b99fbfb3575a3740e877ae4db5869a3744a84e4858b2c0f8876116cc554aec7a7669d3001e9a18b18a5a479b0d167070b5a96fe316486fd21d6eb","ssdeep":"1536:+3w31mN1OhIUEfYsdlaTy8mmN1zq5EfRv7:pcJ941G50z","tlshash":"7fc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":123350,"data":"","first_seen":"2024-07-25T23:19:55Z","last_seen":"2026-08-09T01:59:57.330324Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/main-app-e2770e036b025849.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9733109de378bf1f81882f17cec48f6","sha1":"bf590995019c81fbf0d2a03eb43b226213b6fb2e","sha256":"9f9a08e3051862fd238cbc5585fc735fd91759c7fb7bfc9b1bf6c3c5a5bda8dc","sha512":"086ca5eb2658acf871f16ed8d02928d8befb1afc91a54fd88956148d8717220914c06f00c868e5b510df5166394bdc7b0292f188fb013266508b4f6bb8b10405","ssdeep":"","tlshash":"d6f0829d274db02f2923aa20fdd75c2e285e417428675d602615ddf12c377ac83f1c38","size":462,"data":"","first_seen":"2026-05-14T12:53:43.745078Z","last_seen":"2026-05-14T12:53:43.745078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0743c93720da35403573492a39eb8fe1","sha1":"e9784ccec7bb419806e21e23bc8f6c3e5c84d77f","sha256":"8cdaca0d6e08e41bb451a022124225d2a8c779afbbfd895aa242ed02f65e5991","sha512":"8ddefbfbfb44a0ebefbc1cf9d6323dea09a98c44f7f53310268fe832c078ad4546d0cae615acd47c65924899852cf46fee30d80290d421db85e760699364daf4","ssdeep":"","tlshash":"61d0a7a5f3c09bc4a4210706d7f35c1024e5fc3c82309b442059901e5239d79d6c4d04","size":221,"data":"","first_seen":"2026-05-14T12:53:43.773236Z","last_seen":"2026-05-14T12:53:43.773236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9ad59bc76cc8f34522c940c1e622621","sha1":"8eccb77a6380e57cac6c485236cc9e326a1470e7","sha256":"6a40c1798126d471eb1dbec107cdcde8ac75246227e7d1a56c54024514996ae4","sha512":"3f38a30b242987e2613a2a8e8b8a760fed49a9bee2e27e6f2cf095658a536989120dc4ecdb966d5cefd3faa06deba37a86470ee57462c7e22c02d29be9cba39e","ssdeep":"","tlshash":"bc711ded6405dc8bedda7c4812feac3a54dd419f0bd18abdd6c4ee0149824bd6a92e80","size":3725,"data":"","first_seen":"2026-05-14T12:53:43.774209Z","last_seen":"2026-05-14T12:53:43.774209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dfa0a8df0361c3aa80c2ee3f92eb186","sha1":"6bf9d83c9cf6701616602efb8b0521ffd2464619","sha256":"aa34bf4206465d74d5d47517b390e8eb366d1ea23578a78af54a3088b5ad7657","sha512":"5cece85e7be5d693c0fa2ae7c69e2149717478d3cbd1499f9b986d7a9453bb3d6d651bcb1550df7a6b1097b10e80f9f2cf856426d52e9c9fcdd86a09b3e8b444","ssdeep":"","tlshash":"5c417da3ec21dc0897da4f881c7b3c7854dc83938399a15bb69ce9788486c7445f85a6","size":2299,"data":"","first_seen":"2026-05-14T12:53:43.775126Z","last_seen":"2026-05-14T12:53:43.775126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/webpack-abb93b3745a1e4f0.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cdb4b8618e71794467c11308426d086","sha1":"d8c71770a731f37ddd040087e8ee206c114649ab","sha256":"54063a119d41c07d4317abd5e44a3fe55666d1feeecef2afd6b1fb933b721add","sha512":"48095fa76bbcf960e5c496e457ac3a637beb86af454182b9d5c5b2f668548377832a175a0cb5ca4083f7734ef85b385539e9a771950edd209bdcad0578804659","ssdeep":"","tlshash":"627196dd71a1f8ba1783a4a1043fd546f23f28b2281ee4a0cb25d8f5fc355498123fa8","size":3557,"data":"","first_seen":"2025-09-13T00:45:13.234811Z","last_seen":"2026-07-07T22:52:13.497241Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/app/page-cd0ac41db50ac5bb.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc026a3a83b5d909039844921f1b089","sha1":"29fa5002942931f5c2784a351d5ba48d3dcb09ac","sha256":"bcc97f2e231be5733f15e3e75d3e7a1818647e88a52aa194bf71c2752126bf92","sha512":"01c9f2d2bb2c76684f40a22e938fed1dfa9debdfc3faea7396cd9680d14af4ebd3e6adde4490bb9a7f3b91f49b836827ac9a0cfe112cce473a8b790cdf23d2bc","ssdeep":"768:l+J7J+y3nJTJ82ECVC0JDFJCMfvHXTl+g9sectyqwPv:KZGyJDZDz9p","tlshash":"2ef2a458b2156fac7a7705a47e5ba14ca33f2b98cf0b887574bd34052b484d43b23bda","size":36923,"data":"","first_seen":"2026-05-14T12:53:43.742823Z","last_seen":"2026-05-14T12:53:43.742823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winpoly.xyz/logo.svg","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 02 May 2026 22:01:13 GMT\r\netag: W/\"370-19deab5c0d9\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMPyOAuA1egc1GNtFTWNyi6%2FbYs0tG0SAdfFglIc3xI%2BkU9jL8hBgYtcLb%2FGIokFp8EUXEf2d0zX1HawkNqScvhtLVR54KtgNREv%2FHU8Yjt47JHj%2B5OwjqUkEKSDyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fba0b7e18a556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"822133904dfa9ff1685a023d9e81c3f2","sha1":"6f337fce1f26d89557bf8c18b6f00406214982d2","sha256":"49e3534d3a2f4a11a4d77fe4ec2605f0289591e3f64daef9f64e3037f8945d37","sha512":"0fee7861d39f9546bc6d28b712ed53ab02a78ef0729a5b5e159e715fdee7835b0bd964c2784d14e20147e21ddaf1eb70a874924f41df60e9a6b1cde825c9a096","ssdeep":"","tlshash":"6d1123ea2b5049800a8a4c609681203534ef69ff7a190588cfb6f991389e2cacd346df","first_seen":"2026-05-14T12:53:43.7372Z","last_seen":"2026-05-14T12:53:43.7372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/app/page-cd0ac41db50ac5bb.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/chunks/app/page-cd0ac41db50ac5bb.js HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"903b-19df441c23e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHkLMrXj2gXWYvFGVHYnbAUCIRXRLOxGOHCCUzIuYWHSTQEBJet9AppUdwEHF9Euf4HPB8L3CnHKhR750C4v2NdGYd%2BJIqooAEeRQLqUJhwRngvpXsO31mRylHsnjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e18b956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36885), with no line terminators","md5":"7bc026a3a83b5d909039844921f1b089","sha1":"29fa5002942931f5c2784a351d5ba48d3dcb09ac","sha256":"bcc97f2e231be5733f15e3e75d3e7a1818647e88a52aa194bf71c2752126bf92","sha512":"01c9f2d2bb2c76684f40a22e938fed1dfa9debdfc3faea7396cd9680d14af4ebd3e6adde4490bb9a7f3b91f49b836827ac9a0cfe112cce473a8b790cdf23d2bc","ssdeep":"768:l+J7J+y3nJTJ82ECVC0JDFJCMfvHXTl+g9sectyqwPv:KZGyJDZDz9p","tlshash":"2ef2a458b2156fac7a7705a47e5ba14ca33f2b98cf0b887574bd34052b484d43b23bda","first_seen":"2026-05-14T12:53:43.742823Z","last_seen":"2026-05-14T12:53:43.742823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/main-app-e2770e036b025849.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/chunks/main-app-e2770e036b025849.js HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"1ce-19df441c23e\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrtpEEEG1vc8DGJigNvt7Cmxv84lkmf86nzeIeJoDen%2BshiLcvQWqkxYojwuEWJrezkWQDosZQzBj%2F8WTKUCN1fug4u6vKEs1MWJWhmfMGCIPw6kjWG%2FKZ8fevCdNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fba0b7e18b256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (462), with no line terminators","md5":"c9733109de378bf1f81882f17cec48f6","sha1":"bf590995019c81fbf0d2a03eb43b226213b6fb2e","sha256":"9f9a08e3051862fd238cbc5585fc735fd91759c7fb7bfc9b1bf6c3c5a5bda8dc","sha512":"086ca5eb2658acf871f16ed8d02928d8befb1afc91a54fd88956148d8717220914c06f00c868e5b510df5166394bdc7b0292f188fb013266508b4f6bb8b10405","ssdeep":"","tlshash":"d6f0829d274db02f2923aa20fdd75c2e285e417428675d602615ddf12c377ac83f1c38","first_seen":"2026-05-14T12:53:43.745078Z","last_seen":"2026-05-14T12:53:43.745078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/background.mp4","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /background.mp4 HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://winpoly.xyz/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 5017630\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 02 May 2026 22:01:13 GMT\r\netag: W/\"4c901e-19deab5c0d8\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\ncontent-range: bytes 0-5017629/5017630\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5qrDISk1A5OvRywNRXgfgzszKmSNtty49GdYvjiXN4rBNdntc3477doHHufwyfTGZ%2BWwRBUPB5XyT5wJARpkA4mhRjtCg3wk0V7OT51b8DKNfMc4vMc08IhFzPry4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e895056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104261,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1af01319444372e16c228834a59633e9","sha1":"75a86e27ef3ecfa20111acda2c864940900c2465","sha256":"c5d4f3d423792456ca69f39984aa2de77aa7bd667a532b1e155f25e3551d6adc","sha512":"d86a2e745a5f2a700187bceaecefe1b7a0eaf9cbc00b6446a2ad6f5af4943074f544df35248c0abfaa43d83ccc7cf36981637cbda9f3abaaf7a5b8b9ca5e4df0","ssdeep":"24576:0hgcvUniOksgTEsHMKtGUbtKNgEtCsENSqfWL1UJ:e98kTVTtZ4gEONSUWL1Y","tlshash":"f625125ba302404ecf2893b076981f077771e1643acb43877c5123656e6f6e69eb13ea","first_seen":"2026-05-14T12:53:43.747503Z","last_seen":"2026-05-14T12:53:43.747503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/audio.mp3","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /audio.mp3 HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://winpoly.xyz/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7072169\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 02 May 2026 22:01:13 GMT\r\netag: W/\"6be9a9-19deab5c0b9\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\ncontent-range: bytes 0-7072168/7072169\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YoMJnOc3%2B1sJluyvGH2q4GJbWpCxNLcAIEDwcw6X5bZA5WYMB%2F68DvA1%2BgzVhIZWaoIvdZWv6YWGKddlFtua07j2HssxI0WBhEIOEMZhT%2BD3TMAfQWlPpf9e0F0Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e895256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1058576,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"cf6efa61926e13dce602e1ef43c87292","sha1":"e6f328aea6ca8faed3c9f66c2c2747b9eaa7b4ac","sha256":"51ad6a69f5e9000db845274b58eb9003867f3c366edf7159acb9128f1bbc4c4e","sha512":"c10fb221de7e63ac6a8582f74e580afbb3bb8a6d09176b97ed91c70c9d43a9cafea59cc710f226f353d2bb4f88683b23c737e788a48d07812cf1cc94700da307","ssdeep":"24576:GeoobK5hzILuja7TefXtCvgBDEzNbeChc0BXKvCXGG0DAqy7:pbaKJ7T4Xkp1KkGG0I7","tlshash":"ef252305db20c1cdc9ab7b7a8d73a630a9775a487191db1b80c973625ce74deb88cb31","first_seen":"2026-05-14T12:53:43.751302Z","last_seen":"2026-05-14T12:53:43.751302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/api/visitor","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"POST /api/visitor HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nContent-Type: application/json\r\nContent-Length: 178\r\nOrigin: https://winpoly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":178,"data":"{\"sessionId\":\"fukdbiz1hn\",\"userTime\":\"5/14/2026, 12:53:17 PM\",\"client\":{\"screen\":\"1280x1024\",\"viewport\":\"1280x1024\",\"dpr\":\"1x\",\"language\":\"en-US\",\"timezone\":\"UTC\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sR6FE7TfTFs%2BXdS8c3OVtQwxCBEk0gv%2B79Ioz1yyOU%2F1%2FkmuFEkmV0JyDFcYfxw9JC2YVLg%2BIhScMsFxs7N2YBoqfZ40D37Mo5kEKtAZmaRM1O72deFmuuBXh1hMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fba0b821d0856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-10T02:11:02.314097Z","times_seen":181064,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/css/46974ad025d38cc5.css","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/css/46974ad025d38cc5.css HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"455b-19df441c249\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtkFxBiiL0a75jplxwgJYRwdUVXISnP3ceSYSfRh1pm8PNmcF2VsJiU3rw5f7NSalU24cO%2FR%2Fi9KPFyrDQx9jIChkphN%2BFED6%2B4LszLd8fgE6mdrjCRe6fEJR31rQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e18a856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17755,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14742)","md5":"a41278674e40d973b92ed0f734670c54","sha1":"56237b30c57cd88ae148aec5176d67cc856f25e6","sha256":"e341442b838944b91ca4e74b1be7d617695c059fa1d423630048c06a49c759b6","sha512":"49cbe0a2dfe7ff094dfa2bca344ed092d028a129ae3cf1644cee86df48372e46d4e77b871840d18295ed4c8cef4f0c4c46e22c966e1e845137013c071cf2865d","ssdeep":"192:+YX7JXYS7JXYzGweLgEcGEKDsf+I8e19agRKB0dgLzZP4VhrL1401dEf1i:n9HrwOgEcGEKTI8SQedVVhrhTXD","tlshash":"2a82c81e6704142bad2bc0f6d1d0fe98b116f1c1ef3aa7f9f98212015fd62e71da2608","first_seen":"2026-05-14T12:53:43.76154Z","last_seen":"2026-05-14T12:53:43.76154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/webpack-abb93b3745a1e4f0.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/chunks/webpack-abb93b3745a1e4f0.js HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"de5-19df441c243\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f64FDKbr4d9H3PXviF0KEYY2X6%2BsK1DIdC7r6N1K%2Bi20DfsPkxEb2COuRAsCY8oaqQLP85u3LYYBga6zULliVuW6%2FjPdd9T%2Fww017aVA1UEbynBQVKmpD4Rr%2BWRr1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e18a956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3557), with no line terminators","md5":"9cdb4b8618e71794467c11308426d086","sha1":"d8c71770a731f37ddd040087e8ee206c114649ab","sha256":"54063a119d41c07d4317abd5e44a3fe55666d1feeecef2afd6b1fb933b721add","sha512":"48095fa76bbcf960e5c496e457ac3a637beb86af454182b9d5c5b2f668548377832a175a0cb5ca4083f7734ef85b385539e9a771950edd209bdcad0578804659","ssdeep":"","tlshash":"627196dd71a1f8ba1783a4a1043fd546f23f28b2281ee4a0cb25d8f5fc355498123fa8","first_seen":"2025-09-13T00:45:13.234811Z","last_seen":"2026-07-07T22:52:13.497241Z","times_seen":10,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/fd9d1056-23bdddb1df3a91c8.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-23bdddb1df3a91c8.js HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"2a31f-19df441c244\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09dlP%2BYm57ANEQH89AfCQcXOnNseydQS68wVmo4IXTWX1gAyNl7o83hTRLTkzVgUGxub4mNPibY6aHfro6PS65ES20F%2B6MYZNLKfdvZzq6%2BGcM6eKe7FC1iqoSv3rA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e18ab56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172831,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-08-09T01:59:57.341842Z","times_seen":3430,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/chunks/23-a3a1b6f47a77ad02.js","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/chunks/23-a3a1b6f47a77ad02.js HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"1e1d6-19df441c244\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 401608\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXxaxDlMBYZhzxloutrksBzqOphIRv2Armtt%2B87f9RgJE%2B%2F73Ewdd6OiaL4xk%2FX%2BO1wv7G7jOV0zyu3jLFBR0aH7TPmjMZSxkWfQ2Y66hBn5tyU64PBJmOlILxj1IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e18b056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123350,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4a2d7c3d59d9298d8e3dfdd6134a4eca","sha1":"e77d21b82dd7f24fe0e7bcfef2e0b9818b2fed65","sha256":"839d821426383cc0f978a6a20074e6f5524d23ad66f19bdb883f6874bca1cfce","sha512":"dd050b2fd17b99fbfb3575a3740e877ae4db5869a3744a84e4858b2c0f8876116cc554aec7a7669d3001e9a18b18a5a479b0d167070b5a96fe316486fd21d6eb","ssdeep":"1536:+3w31mN1OhIUEfYsdlaTy8mmN1zq5EfRv7:pcJ941G50z","tlshash":"7fc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2024-07-25T23:19:55Z","last_seen":"2026-08-09T01:59:57.330324Z","times_seen":537,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/favicon-16x16.png","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 03 May 2026 20:39:11 GMT\r\netag: W/\"1c8-19def910225\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dhuw6CycBhaYp5ottH8rlCaCXr9BxQV7xsazUKuUbSuzfuI5At7FolG9SuT%2Bm01dUWkcAno8WM4UEADxMbl4BytBxh0CKR9WAZmMZh7CBdZx8QqaxRzsOpAHB86fCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b81cca756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"22f9652ae547116afcb84ecec4697ab9","sha1":"d3c79cd7f0b8b1a7a37a2208c7c644baf7d78ff7","sha256":"38aec8684b75b9d1b96883157b6b4ef46f3a7c51e176c114727efa2b23571a96","sha512":"76291387a833bf8bc3dca94036fa0d4a5b1b38074dafb49e9c939310b5440df0d81fa81cd434347f38cba4c4c64d5b9044957a81df838581069766731ffd918c","ssdeep":"","tlshash":"59f02396336e587f8de654f5ddf25124c4b01241f8693078499948701a5bc7380f36f3","first_seen":"2026-05-14T12:53:43.768271Z","last_seen":"2026-05-14T12:53:43.768271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T12:53:16.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 12:53:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVubRBA0A2RZuY%2BXreGmWFgLas266fEwu6vt94%2B7PORdOlUfck7O%2BylVVuq1d4XimU6n88twZuaDQiscCckTHetfAaoKcAhPbYlQi4Hm6Eg8eTs5VHPfWQoGH%2Ft5Yw%3D%3D\"}]}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fba0b7b0ec4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":31821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31760), with no line terminators","md5":"838de7adbc6746574b2e8e5d31593dde","sha1":"6e47fb369ac53100c0597a5d1451de63a1c5d92d","sha256":"943912f053a70e065c3c864e0a08f2408b9a7af9a3738d415907873e9c87fb6d","sha512":"418d7e0cfb30ac7f97384cf590ce4d1f3dabc9c5c8b5dd1d0d4223e74e5fa6f1820fbd6c8ba468e99bbea08c074eb6267422ebe09ea10cbb1b7cb7a7407ae39b","ssdeep":"768:NNCOoAEcjkAaThbVYKC7fFdvkakFYmnde2heZsWjHJQF:iAmPE5H+F","tlshash":"a9e2f861b210ce35567306aa34f3ffb5d2f75289c396c83964acd1060bc5cf95b22b9a","first_seen":"2026-05-14T12:53:43.769803Z","last_seen":"2026-05-14T12:53:43.769803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":62,"dns":40,"connect":1,"send":0,"wait":277,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winpoly.xyz/_next/static/media/03f2d74f5e7b171e-s.p.woff2","fqdn":"winpoly.xyz","domain":"winpoly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winpoly.xyz/","date":"2026-05-14T12:53:17.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winpoly.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 21:28:21 GMT","end":"Fri, 31 Jul 2026 21:28:20 GMT"},"fingerprint":{"sha1":"8C:5F:59:78:2B:5B:DF:3E:DA:4E:FD:BE:92:56:B6:E1:8B:B0:C8:91","sha256":"3E:10:4D:DD:64:AC:9D:C2:BF:23:82:11:A6:0F:EA:1F:D5:20:29:83:3C:A9:7D:14:D7:F5:46:DB:D5:AA:49:D8"}}},"request":{"raw":"GET /_next/static/media/03f2d74f5e7b171e-s.p.woff2 HTTP/1.1\r\nHost: winpoly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winpoly.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 12:53:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7408\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 04 May 2026 18:30:43 GMT\r\netag: W/\"1cf0-19df441c23e\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 401608\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGXX7XGBW7zDvn9VBpHf%2BBt2fgT4Ky8tio5mpjo9jb%2FHhUnRclGBz7rzPndlEdOZEXWC5lnkDXefkLppmd0xEP8Vx83SGWOo5NS4zY5OHz0AN0jsSCb8uhdrRoi6zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fba0b7e18a456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7408, version 1.0","md5":"2cc66b9699631c44a14912c1e6271b3d","sha1":"3a0f0408128f7776ee1da171eb6e59ffad340f8e","sha256":"73b87eb7b02dfec4cb1ddfabad6e625d9c77b3c81015064420de88d8dd04816c","sha512":"6f14cd137c31318a772d5c081a1a198283e11eabac60cd39635e91746b644063985f78f388499fae8c345ce1042d29183d39f12e0260897175fbc985e2b693bb","ssdeep":"192:I2XcRpmW9RUShaoRVGVlKxpiqnJBii0y5spDM:IIct9SShaOGL/qOly5eo","tlshash":"a6e1afeb35743a12c26fe37b5289c7b1aef0f1e850ba27d0154d512c64a3b57b993062","first_seen":"2025-10-30T08:21:36.951295Z","last_seen":"2026-08-09T23:19:31.017151Z","times_seen":314,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"winpoly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}